Security Operations Engineer

About the role

We're looking for a Security Operations Engineer to join our team and help strengthen the organization's security operations across our enterprise environment. In this role, you'll work with security technologies, investigate and respond to security events, improve security controls, and partner with IT and Infrastructure teams to reduce risk and strengthen our overall security posture.

This is a night shift, onsite role in Makati.

What You'll Do

• Develop, optimize, and maintain security detection use cases across SIEM, EDR, and email security platforms
• Investigate alerts and coordinate response and containment with IT and Infrastructure teams.
• Work with SIEM and EDR platforms to improve threat detection and response.
• Support security operations across AWS and Azure Cloud environments.
• Identify and prioritize vulnerabilities and help drive remediation.
• Review and strengthen security configurations across endpoints, systems, identity, and networks.
• Participate in security risk assessments for new technologies, applications, and projects.
• Support incident response exercises, investigations, and continuous improvement initiatives.
• Partner with IT, Infrastructure, Application, and Compliance teams to address security risks.
• Help maintain security documentation, metrics, and audit readiness.

What We're Looking For

• At least 5+ years of experience in cybersecurity, security operations, incident response, or a related field.
• Hands-on experience with SIEM and EDR technologies.
• Experience working with security controls in AWS and Azure environments.
• Experience investigating security incidents and supporting containment and remediation.
• Knowledge of vulnerability management and security risk assessment.
• Working knowledge of Windows, Active Directory, identity/access management, and network security.
• Familiarity with DLP and enterprise security controls.
• Strong analytical and problem-solving skills.
• Ability to communicate effectively with both technical and non-technical teams.

Nice to Have

• PowerShell or Python experience
• Security automation experience
• Experience with SOC 2, HITRUST, or other regulated environments
• Security certifications such as Security+, GCIH, GCIA, GCED, CISSP, or CASP+