Security Engineer (Work from Home)

As a Security Engineer, you will play a pivotal role in protecting the agency and its clients against evolving threats. You will design, implement, and optimize security tools, systems, and automation while embedding security into solutions from the outset. Working closely with DevOps, TechOps, Technology, and Platform teams, you’ll enhance the scalability and efficiency of Autonomic Security Operations and ensure alignment with HITRUST and other industry-recognized security standards.

You will manage and optimize the security platform stack—focusing on tools such as Google SecOps, Google Threat Intelligence, BindPlane, and New Relic. You’ll monitor, configure, and evolve SIEM, XDR, threat intelligence, and observability platforms to strengthen defenses. Reporting to the Information Security Director, you’ll support seamless integration of new applications and acquisitions while advancing security practices across the organization.

This role requires deep technical expertise and a hands-on approach to safeguarding infrastructure and maintaining robust autonomous security operations.

Key Responsibilities

Security Engineering

• Design and implement secure systems, tools, and automation solutions.
• Develop and refine detection logic to enhance visibility and data integration.
• Apply security reliability engineering principles and integrate threat intelligence with vulnerability management.

Governance & Compliance

• Support and enforce policies aligned with the agency’s security framework and compliance standards.
• Assess, mitigate, and document information security risks.
• Manage compliance for new applications and acquisitions, ensuring seamless integration into existing infrastructure.

Security Platform Management

• Administer and optimize core security platforms, including Google SecOps, Google Threat Intelligence, BindPlane, and New Relic.
• Ensure platform availability, performance, and integrity through regular maintenance and upgrades.
• Collect, process, and integrate telemetry and security data to support Managed Services SOC.

Threat Detection & Incident Response

• Collaborate with SOC to develop and fine‑tune detection rules and alerts.
• Monitor and investigate security incidents, escalating as needed.
• Support Incident Response teams during breaches and post‑incident analysis.

Automation & Systems Integration

• Automate workflows and incident responses using scripting (Python, PowerShell) and platform‑native tools.
• Integrate security platforms with identity systems, ticketing systems, cloud environments, and manage configurations using IaC principles.

Security Best Practices

• Enforce security best practices across systems and cloud environments.
• Assist with vulnerability assessments, penetration testing, and audits.
• Contribute to policy, procedure, and standards development.

Reporting & Documentation

• Generate reports on security posture, platform performance, and incidents.
• Maintain detailed documentation of configurations, procedures, and playbooks.
• Provide training on security tools and best practices to technology teams.

Qualifications

• 3–5+ years in Security Engineering, Security Operations, or a related hands‑on role.
• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• Experience integrating new applications and acquisitions into existing infrastructures.
• Familiarity with compliance frameworks (HITRUST, SOC 2, ISO 27001, GDPR).
• Strong understanding of security architecture, system design, and cloud security (GCP, Azure, AWS).
• Proficient with SIEM, SOAR, EDR/XDR, NDR, firewalls, IDS/IPS, and cloud security platforms.
• Hands‑on experience with Google SecOps, Google Cloud Security Services, Google Threat Intelligence, BindPlane, and New Relic.
• Experience developing detection rules using YARA‑L, case management systems, and automation playbooks.
• Proficiency in Python, PowerShell, Bash.
• Skilled in SOAR platforms, automation frameworks, and telemetry data processing.
• Strong knowledge of modern cloud architectures (microservices, containers, serverless).
• Understanding of networking protocols, Linux/Windows OS, and common attack vectors.
• Expertise in incident response, forensics, and threat intelligence.
• Strong analytical, troubleshooting, and communication skills.
• Ability to work independently and manage multiple priorities.
• Google Cloud Professional Security Operations Engineer or Google Cloud Professional Security Engineer certification.
• Relevant certifications (ISC2, SANS, GIAC, Google Cloud).

Preferred Qualifications

• CISSP, CSSLP, CompTIA Security+.
• Experience in marketing, advertising, or technology agency environments.
• Experience with EDRs, vulnerability scanners, CASBs.
• Familiarity with DevOps/DevSecOps practices.

Pay: Php90,000.00 - Php120,000.00 per month

Benefits:

• Work from home

Work Location: In person