Senior Cybersecurity Engineer

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Design, implement, and oversee security measures across cloud, identity, endpoint, network, email, and SaaS environments.

• Lead technical investigations, containment efforts, remediation processes, and post-incident reviews for security events and incidents.

• Engineer and enhance SIEM, EDR/XDR, vulnerability management, identity security, secure email, and cloud-native security tools.

• Develop detection rules, automation scripts, playbooks, dashboards, and actionable security metrics.

• Conduct vulnerability assessments, prioritize remediation based on risk, and collaborate with system owners to address findings.

• Review solution designs and modifications for security risks and recommend practical controls that align with business objectives.

• Support identity and access management, privileged access management, Zero Trust, conditional access, and least-privilege initiatives.

• Contribute to security architecture, standards, procedures, technical documentation, and control assurance activities.

• Collaborate with third parties and internal stakeholders to assess technical security risks and validate remediation efforts.

• Mentor engineers and analysts, offering technical guidance, and advocate for secure engineering practices.

• Participate in an on-call or incident escalation rota as required.

⛳️ Requirements

• Typically possess 5+ years of experience in cyber security engineering, security operations, infrastructure security, or a related field.

• Proven experience in implementing and managing enterprise security technologies within complex or distributed environments.

• Strong knowledge of cloud security, preferably with Microsoft Azure, including aspects like identity, logging, workload protection, and configuration management.

• Experience with enterprise-level EDR/MDR solutions.

• Solid understanding of networking, Windows and Linux security, authentication protocols, APIs, scripting, and modern application architectures.

• Experience in incident response, threat analysis, vulnerability management, and security monitoring.

• Familiarity with ISO 27001, NIST Cybersecurity Framework, CIS Controls, and MITRE ATT&CK.

• Ability to articulate technical risks clearly to both technical and non-technical stakeholders.

• Relevant degree or equivalent professional experience.

• Professional certifications such as CISSP, CCSP, GCIH, GCIA, OSCP, Microsoft Cybersecurity Architect, or equivalent.

• Experience with infrastructure as code, DevSecOps, CI/CD security, container security, or security orchestration and automation.

• Proficiency in PowerShell, Python, KQL, or another relevant scripting and query language.

• Experience supporting security assessments, audits, penetration tests, or regulatory compliance programs.

• Knowledge of data protection, secure software development, and third-party security risk management.

• Strong analytical, troubleshooting, and problem-solving skills.

• Pragmatic, risk-based decision-making with a focus on measurable outcomes.

• Excellent written and verbal communication skills along with strong stakeholder management abilities.

• Capacity to manage competing priorities and perform effectively during security incidents.

• High standards of integrity, ownership, collaboration, and attention to detail.

• Commitment to continuous learning and improvement.

🏝️ Benefits

• Flexible and hybrid working arrangements.

• Opportunities for career development and learning.

• Global collaboration and exposure.

• Employee wellness and support programs.

• The chance to contribute to building a more sustainable future.