Cloud Security Operations Engineer (Hybrid)

Cloudstaff; Metro Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Cloudstaff is seeking a Security Operations Engineer to join our hybrid team in the Philippines. The role focuses on securing Azure, AWS, and Microsoft 365 environments, working with SIEM, vulnerability and patch management, and endpoint protection.

You will tune alerts, collaborate with SOC analysts, manage backups, and implement security controls across Netskope, Defender/CrowdStrike, Intune, and Entra ID.

Qualifications

• Demonstrated experience operating a SIEM such as Rapid7 or Microsoft Sentinel.
• Hands-on vulnerability and patch management across cloud and endpoint estates.
• Working knowledge of EDR and application whitelisting operations.
• Practical security experience across AWS and Azure, with confidence in Microsoft 365 E3, Intune and Entra ID administration.

Responsibilities

• Operate the Nexgen Rapid7 SIEM by ingesting logs from Entra ID, M365, AWS CloudTrail and GuardDuty.
• Tune SIEM alerts, severity classification and incident workflow with the SOC Analyst.
• Lead vulnerability management using Rapid7 and Defender for Cloud across Azure and AWS.
• Run patch management via Intune for workstations and AWS Systems Manager for SOHO and Digital apps.
• Operate EDR (CrowdStrike or Defender) and manage application whitelisting.
• Deploy and validate immutable backups with Veeam and AWS Backup for M365 and AWS workloads.

Skills

SIEM experience

Vulnerability management

Patch management

EDR / whitelisting

Cloud security (AWS/Azure)

Intune / Entra ID admin

Netskope familiarity

Defender / CrowdStrike EDR

Backup & DR tooling

Security certification (SOC)

Education

Bachelors in IT/Cybersecurity

Tools

Rapid7

Microsoft Sentinel

Microsoft 365 E3

Intune

Entra ID

Netskope

CrowdStrike

Defender for Endpoint

Cloudflare WAF

Veeam

AWS Backup

Job description

Cloudstaff is seeking a Security Operations Engineer to join our hybrid team in the Philippines. The role focuses on securing Azure, AWS, and Microsoft 365 environments, working with SIEM, vulnerability and patch management, and endpoint protection.

You will tune alerts, collaborate with SOC analysts, manage backups, and implement security controls across Netskope, Defender/CrowdStrike, Intune, and Entra ID.