Security Engineer
A
A7 Recruitment
70 - 120K PHP
Full-time
5th Ave. cor. 26th Street, Bonifacio Global City, Taguig, 1634 Metro Manila, Philippines
Cybersecurity Engineer (Senior Associate)
Experience Level: 4–6 Years
Work Arrangement: Full Onsite
Location: Pasig or Taguig
Schedule: 24/7 Rotating Shifts
Shift Schedule:
- Morning Shift: 8:00 AM – 5:00 PM
- Mid Shift: 5:00 PM – 2:00 AM
- Graveyard Shift: 1:00 AM – 9:00 AM
- Shift rotation may be every two weeks or monthly, subject to discussion.
Job Summary
The Cybersecurity Engineer (Senior Associate) is responsible for supporting day‑to‑day cybersecurity operations across SOC, Vulnerability Management, IAM, and Security Operations. This role requires strong hands‑on technical expertise, threat analysis capabilities, and the ability to work in a 24/7 operational environment.
Key Responsibilities
- Operate and support Security Operations Center (SOC), Vulnerability Management, IAM, and SecOps functions.
- Monitor, investigate, and respond to security alerts and incidents using SIEM, EDR, and other security platforms.
- Develop, maintain, and optimize detection logic, correlation rules, and alerts.
- Perform threat analysis, root‑cause analysis, and vulnerability assessments.
- Support and manage network security controls including web gateways, email security, DLP, and related technologies.
- Document incidents, procedures, findings, and remediation actions clearly and accurately.
- Collaborate with internal teams to improve security posture and operational efficiency.
- Follow ITSM processes for incident, problem, and change management.
Required Skills & Qualifications
- 4–6 years of hands‑on experience in SOC, Vulnerability Management, IAM, or Security Operations.
- Strong experience with:
- SIEM platforms
- Endpoint Detection & Response (EDR) tools
- Vulnerability Management tools
- IAM platforms
- Network security technologies (Web Gateway, Email Security, DLP)
- ITSM systems
- Proven ability to create detection logic, correlation rules, and conduct threat analysis.
- Solid understanding of:
- Networking fundamentals
- Operating system security
- Identity governance
- Vulnerability assessment methodologies
- Strong analytical, documentation, and communication skills.
- Willingness to work onsite and on a 24/7 rotating shift schedule.
Preferred Skills
- Experience with scripting languages such as Python, PowerShell, or Bash.
- Knowledge of cloud platforms such as Azure, AWS, or GCP.
- Understanding of MITRE ATT&CK framework, vulnerability scoring models, and threat intelligence.
- Security certifications such as:
- Security+
- CEH
- AZ‑900
- ITIL
- Other relevant cybersecurity certifications