Sr. Security Remediation Engineer

The Job

We’re looking for a Senior Security Remediation Engineer to become one of the first two team members of our dedicated Security Operations team in Cebu. This is a hands-on builder role for someone who enjoys solving security problems through automation, integrations, and reliable engineering. As Senior Security Remediation Engineer, your focus will be on building and operating the systems that help a lean security team remediate risk at scale — from the moment a security finding is detected through remediation, rescanning, and verified closure. You’ll be working closely with a Security Operations teammate focused on detection and triage. Together, you’ll share ownership of security workflows and support each other across the security lifecycle.

Responsibilities

• Manage and improve security remediation workflows.
• Integrate Wazuh, Cisco XDR, Jira, identity systems, Google Workspace, GitHub, and other security tools to automate information and context sharing.
• Automate enrichment, ownership mapping, and remediation workflows using Python, APIs, and webhooks, while helping implement and maintain SOAR workflows as the team grows.
• Build automated checks to verify remediation success and ensure issues remain resolved.
• Help engineer and scale Wazuh as the SIEM and develop the security data pipelines that support it.
• Manage security automation and configuration through Git and pull requests. Build reusable tooling and extend existing Ansible-based patch automation.
• Patch and harden AWS, GCP, Linux, and network infrastructure, including IAM, configuration, and credential management, with proper change control and tested rollback procedures.
• Help deploy and operate a platform that discovers and monitors AI agents, working with relevant teams to remediate policy findings and integrate the platform with Jira and the broader security stack.
• Collaborate with IT, identity, application, infrastructure, and platform teams to implement security fixes effectively. Mentor the Cebu Security Operations teammate, particularly in scripting and automation.

Qualifications

• 5+ years in security, systems, cloud, or infrastructure engineering, including hands-on production change experience
• Strong Python and API/webhook skills.
• Deep working knowledge of AWS or GCP and hands-on experience with the other: IAM, network controls, certificates, service accounts
• Solid Linux administration and hands-on Ansible or equivalent, with Git and pull-request workflows
• Working knowledge of CVEs and CVSS, and the judgment to tell real exploitability from scanner noise
• Comfortable being the most senior technical person in the room, and careful with production

What We Offer

• Hybrid Setup (RTO 3x a week)
• Free lunch every WFO
• Competitive Salary
• Fixed weekends off
• US Based Company

Location: IT Park, Cebu

Shift: Day Shift 6:00 AM - 3:00 PM

Pay: From Php120,000.00 per month

Benefits:

• Health insurance
• Staff meals provided

Work Location: Hybrid remote in Cebu City