Senior Security Operations Engineer

What We Look For

Must Have

• Availability to work on nightshift schedules (flexible)
• 4+ years in security operations or cybersecurity engineering with a heavy focus on Azure security solutions
• Hands-on mastery of the Microsoft security stack: Azure AD, Microsoft Sentinel, Defender for Endpoint/Identity/Cloud Apps, Intune, and Windows Server hardening
• Proven experience authoring and operationalizing SIEM use cases and SOAR playbooks, building and tuning them
• Familiarity with vulnerability scanning tools such as Nessus or Qualys, with experience driving remediation workflows with asset owners
• Strong background with EDR, firewalls, IDS/IPS, vulnerability scanners, and encryption protocols
• Proficiency in PowerShell scripting; working knowledge of AWS security services including GuardDuty, Security Hub, and IAM
• Experience with threat intelligence platforms and operationalizing CTI feeds into detection and response workflows

Strong Advantage

• Certifications such as CISSP, CISM, CCSP, AZ-500, MS-500, or ISO 27001 Lead Implementer/Auditor
• Experience guiding organizations through ISO 27001 and/or SOC 2 readiness and audits
• Experience with PCI-DSS, GDPR, or HIPAA compliance frameworks
• Experience with Cloudflare OR WAF
• Background in DevSecOps pipelines and infrastructure-as-code security scanning
• Solid background in Cloud Security Posture Management (CSPM), ideally via Defender for Cloud or a comparable platform
• Experience conducting forensic investigations across Azure or AWS environments, including evidence collection for legal or compliance proceedings

Nice to Have

• Python or Bash scripting alongside PowerShell
• Exposure to fraud-detection tooling and eCommerce security analytics
• Working knowledge of ITIL practices and secure SDLC principles

---

Tools and Platforms We Work With

Experience with any of these is a strong advantage. You do not need all of them.

Microsoft Sentinel · Defender XDR · Azure AD · Nessus / Qualys · Defender for Cloud · Azure Security Center · AWS GuardDuty / Security Hub · Intune · PowerShell · SOAR Playbooks

---

Why Join Us

• Work on high-impact enterprise security programs across Azure-heavy and hybrid cloud environments
• Exposure to enterprise compliance programs across global client organizations, including ISO 27001 and SOC 2 environments
• Hands-on ownership of detection engineering, threat intelligence operations, incident response, and security automation with modern tooling
• Opportunity to mentor and lead within a technically rigorous, security-first team culture
• Remote, full-time setup for Philippines-based candidates