Information Security Analyst

Title: Information Security Analyst

Reports to: Chief Information Security Officer

Department: Information Security

Location: Manila, Philipines – Remote

Term: Full-time | Shift is 4 PM to 1 AM local PH Time

About Atlas Technica

Atlas Technica's mission is to shoulder IT management, user support, and cybersecurity for our clients, who are hedge funds and other investment firms. Founded in 2016, we have grown year over year through our uncompromising focus on service.

We value ownership, execution, growth, intelligence, and camaraderie. We are looking for people who share our Core Values, thrive, and contribute to this environment while putting the customer first. At Atlas Technica, we offer a competitive salary, comprehensive benefits, and great perks to our global Team. We strive to maintain a professional yet friendly environment while promoting professional and career development for our Team Members. Join Atlas Technica now!

Position Overview

We are seeking an Information Security Analyst to join our growing Information Security team. This is a highly technical role focused on strengthening the security posture of Atlas Technica and our clients through vulnerability management, risk and compliance activities, security hardening, monitoring, and incident support.

Working closely with the Chief Information Security Officer and cross-functional teams, the Information Security Analyst will identify security risks, coordinate remediation efforts, support due diligence and compliance initiatives, improve security configurations, and help develop scalable approaches to vulnerability and incident management.

The successful candidate will combine strong cybersecurity fundamentals with analytical thinking, technical problem-solving, automation skills, clear communication, and the ability to work independently. As the Information Security function continues to evolve, this role will provide opportunities to take on greater responsibility and contribute to the development of Atlas Technica's security practices and standards.

Position Responsibilities:

• Review vulnerability reports, investigate findings, recommend scalable remediation approaches, and track remediation progress through completion

• Coordinate with Support, NOC, Engineering, and other technical teams to implement security remediations while minimizing client impact and appropriately planning maintenance activities

• Develop or support scripts, automation, and repeatable processes that improve vulnerability remediation across multiple client environments

• Address vulnerabilities identified through internal and third-party vulnerability management platforms and apply relevant remediation strategies across applicable client environments

• Complete Due Diligence Questionnaires (DDQs) and coordinate accurate, timely responses to security and risk-related information requests

• Review findings from risk assessments and penetration testing, identify appropriate remediation actions, and participate in Business Impact Analyses and tabletop exercises

• Measure and improve alignment with Microsoft security benchmarks, including Microsoft Intune configurations, while identifying opportunities to strengthen workstation, cloud, infrastructure, and security configurations

• Support system hardening initiatives across endpoints, cloud environments, identity, and other security technologies

• Support ongoing SOC 2 and security operations activities, including test restores, KnowBe4 phishing and training reviews, SIEM log reviews, and related security-control activities

• Assist with cybersecurity incident response, investigation, remediation, and follow-up activities

• Partner with the NOC and outsourced SOC resources to develop, maintain, and improve security remediation runbooks and response procedures

• Maintain accurate security documentation, tickets, remediation records, and supporting evidence while contributing to continuous improvement initiatives across the Information Security function

Requirements:

• Strong understanding of cybersecurity principles, security controls, risk management, and industry security practices

• Experience with vulnerability management, vulnerability analysis, remediation, and tracking

• Familiarity with Microsoft Intune, Microsoft security benchmarks, and endpoint or cloud security configuration

• Experience working with security technologies such as SIEM platforms, IDS/IPS solutions, vulnerability scanners, or similar security tools

• Experience with RMM, SOAR, or other automation and security-orchestration platforms

• Scripting or automation experience with the ability to develop scalable approaches to security remediation and operational tasks

• Experience creating and maintaining technical documentation, security procedures, and remediation runbooks

• Strong analytical, troubleshooting, and problem-solving skills with the ability to investigate findings and recommend practical remediation strategies

• Strong written and verbal communication skills with the ability to collaborate effectively across technical and non-technical teams

• Ability to work effectively both independently and collaboratively within a remote, fast-paced environment while managing multiple security priorities

Desirable Qualities:

• Experience working within a Managed Service Provider environment

• Experience supporting security or compliance activities in a multi-client or highly regulated environment

• Exposure to SOC 2, penetration testing, security assessments, due diligence, or related compliance initiatives

• Relevant cybersecurity, Microsoft, or cloud certifications such as AZ-500, SC-900, SC-300, CompTIA Security+, or similar credentials

Atlas Technica is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.