Information Security Engineer

About the Role

We are seeking an experienced Information Security Engineer to design, implement, administer, and continuously improve technical security controls across our enterprise environment.

This role will work closely with Information Security, IT, infrastructure, cloud, workplace, and application teams to strengthen security across endpoints, networks, identity, cloud, and infrastructure. The ideal candidate brings strong hands-on experience with enterprise security technologies, vulnerability management, security monitoring, secure configuration, and incident response support.

Title: Information Security Engineer

Location: Manila, PH

Job Type: Full-time

Key Responsibilities

• Design, implement, administer, and maintain technical security controls across endpoint, network, identity, cloud, and infrastructure environments .
• Configure, administer, and optimize security technologies including endpoint protection, email security, firewalls, VPN, logging and monitoring, vulnerability management, and related platforms.
• Monitor security events, alerts, logs, and control health to identify potential threats and support investigation, response, and containment activities.
• Partner with IT and infrastructure teams to implement secure configurations, system hardening, and technical safeguards aligned with security standards.
• Conduct technical security assessments, configuration reviews, and vulnerability analysis to identify security gaps and improvement opportunities.
• Support vulnerability remediation by validating findings, prioritizing risks, and coordinating corrective actions with system owners.
• Review penetration testing and security assessment findings and support remediation planning and closure.
• Participate in security incident response activities, including investigation, containment, documentation, and follow-up.
• Support identity and access security initiatives, including authentication controls, privileged access management, and least-privilege principles.
• Collaborate with cloud, infrastructure, workplace, and application teams to embed security requirements into technical and operational processes.
• Support audits and compliance activities by providing technical evidence, validating controls, and addressing identified gaps.
• Work with security vendors and external partners to support the secure implementation and operation of security technologies.
• Develop and maintain security standards, technical baselines, procedures, runbooks, and engineering documentation.
• Stay current with emerging threats, attack techniques, vulnerabilities, and security technologies, and recommend appropriate improvements.
• Perform other duties and security-related activities as assigned.

What We're Looking For

• 5+ years of experience in information security, cybersecurity, infrastructure security, or a related technical field.
• Hands-on experience implementing, administering, or supporting enterprise security technologies and controls.
• Strong working knowledge of technologies such as:
• Firewalls and VPN
• Endpoint security / EDR
• Vulnerability management
• Email security
• SIEM and security monitoring
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Encryption and security controls
• Experience with security monitoring, vulnerability management, secure configuration, system hardening, or incident response.
• Strong understanding of least privilege, defense in depth, risk reduction, and secure configuration principles .
• Ability to analyze security alerts, logs, events, vulnerabilities, and technical findings.
• Experience partnering with IT, infrastructure, cloud, or platform teams to implement security controls in production environments.
• Experience supporting security assessments, audits, control validation, and remediation activities.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Strong collaboration skills when working with internal teams, vendors, auditors, and external partners.

Education & Certifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security , or a related field is preferred.
• Relevant certifications such as CompTIA Security+, SSCP, GIAC, Microsoft Security certifications, Azure Security certifications , or equivalent are beneficial.

What You'll Bring

• Strong ownership and accountability when handling security matters.
• Professionalism, integrity, and discretion when working with sensitive systems, information, and security incidents.
• A proactive approach to identifying and addressing security risks.
• Strong technical curiosity and commitment to continuous learning.
• Ability to work independently while contributing effectively within a collaborative security team.
• A continuous-improvement mindset focused on strengthening security controls and reducing organizational risk.