Cyber Defense Engineer

Jardine Service Centre; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Jardine Service Centre Philippines is seeking a proactive Cybersecurity Defense Engineer to implement, administer, and improve cybersecurity technologies and controls across Jardine Matheson Corporate.

The role focuses on engineering, platform administration, vulnerability management, IAM, data protection, and detection engineering, collaborating with infrastructure, cloud, and technology teams to strengthen defenses.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent practical experience.
• 3 to 5 years of cybersecurity experience.
• Experience supporting enterprise cybersecurity technologies and controls.
• Practical experience in one or more of the following areas: security engineering, security platform administration, vulnerability management, identity and access security, data protection, or detection engineering.
• Experience working in enterprise IT or cybersecurity environments.

Responsibilities

• Implement, maintain, and continuously improve cybersecurity technologies and controls.
• Support secure configuration, hardening, integration, and lifecycle management of security platforms.
• Participate in cybersecurity technology deployments, upgrades, and enhancement initiatives.
• Perform technical assessments, testing, and validation of security controls and capabilities.
• Review security configurations and identify opportunities to strengthen security posture.
• Troubleshoot security platform issues and coordinate remediation with internal teams and vendors.
• Support development of technical standards, implementation procedures, and engineering guidance.
• Contribute to automation, operational efficiencies, and security engineering improvements.
• Administer enterprise cybersecurity platforms and supporting technologies.
• Support platform health monitoring, configuration management, policy administration, and operational maintenance.
• Assist with onboarding new technologies, integrations, and security capabilities.
• Support platform lifecycle activities including upgrades, tuning, optimization, and retirement planning.
• Maintain platform configurations, technical baselines, and operational procedures.
• Support enterprise vulnerability management activities.
• Conduct vulnerability assessments and review findings from security scanning tools.
• Coordinate remediation activities with technology teams and system owners.
• Validate remediation effectiveness and perform follow-up verification.
• Produce vulnerability reports, metrics, and risk summaries.
• Support risk-based prioritization and remediation tracking activities.
• Support identity and access management security controls.
• Assist with authentication, authorization, privileged access management, and access governance activities.
• Support identity-related security reviews and control validation exercises.
• Participate in initiatives to strengthen identity security and reduce access-related risk.
• Assist with implementation of identity security improvements and access controls.
• Support implementation and administration of data protection controls.
• Assist with data classification, information protection, and data loss prevention initiatives.
• Support security control testing, validation, and effectiveness reviews.
• Participate in data protection improvement initiatives.
• Assist with policy implementation and control enforcement activities.
• Support implementation and improvement of security detection capabilities.
• Assist with development, tuning, and optimization of security alerts and detection use cases.
• Support collection, analysis, and validation of security telemetry and logs.
• Participate in threat-informed defense activities and control improvement initiatives.
• Contribute to enhancing detection coverage and security visibility.
• Provide engineering support during cybersecurity incident investigations and remediation activities.
• Assist with technical analysis and containment activities when required.
• Support post-incident remediation and control improvement initiatives.
• Participate in cyber incident response exercises and readiness testing.

Skills

Cybersecurity fundamentals

Security engineering

Vulnerability management

Identity & access security

Data protection

Security analytics

Incident response

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent practical experience

Job description

About Jardine Service Centre Philippines (JSC)

Jardine Service Centre Philippines is an organization fully owned by Jardine Matheson Group which is a diversified Asian-based group with unsurpassed experience in the region, having been founded in 1832. JSC is responsible for providing back-office support to the business units of Jardine Group by administrating transactional and rule-based activities. We aim to deliver world-class services to our internal customers in a cost-efficient manner via process harmonization, application of state-of-the-art technologies, automation and process simplification.

We are seeking a proactive and hands-on Cybersecurity Defense Engineer to support the implementation, administration, integration, and continuous improvement of cybersecurity technologies and controls across Jardine Matheson Corporate.

The role is focused primarily on cybersecurity engineering, security platform administration, vulnerability management, identity and access security, data protection, and detection engineering. The successful candidate will work closely with cybersecurity, infrastructure, workplace, cloud, and technology teams to implement and optimize security controls, strengthen cyber defenses, improve security visibility, and enhance the organization's overall security posture.

This position is suited to a technically capable cybersecurity professional with practical experience implementing and supporting enterprise security technologies, security controls, vulnerability management activities, and cybersecurity engineering initiatives within an enterprise environment.

Key Responsibilities

Security Engineering

• Implement, maintain, and continuously improve cybersecurity technologies and controls.
• Support secure configuration, hardening, integration, and lifecycle management of security platforms.
• Participate in cybersecurity technology deployments, upgrades, and enhancement initiatives.
• Perform technical assessments, testing, and validation of security controls and capabilities.
• Review security configurations and identify opportunities to strengthen security posture.
• Troubleshoot security platform issues and coordinate remediation with internal teams and vendors.
• Support development of technical standards, implementation procedures, and engineering guidance.
• Contribute to automation, operational efficiencies, and security engineering improvements.

Security Platform Administration

• Administer enterprise cybersecurity platforms and supporting technologies.
• Support platform health monitoring, configuration management, policy administration, and operational maintenance.
• Assist with onboarding new technologies, integrations, and security capabilities.
• Support platform lifecycle activities including upgrades, tuning, optimization, and retirement planning.
• Maintain platform configurations, technical baselines, and operational procedures.

Vulnerability Management

• Support enterprise vulnerability management activities.
• Conduct vulnerability assessments and review findings from security scanning tools.
• Coordinate remediation activities with technology teams and system owners.
• Validate remediation effectiveness and perform follow-up verification.
• Produce vulnerability reports, metrics, and risk summaries.
• Support risk-based prioritization and remediation tracking activities.

Identity & Access Security

• Support identity and access management security controls.
• Assist with authentication, authorization, privileged access management, and access governance activities.
• Support identity-related security reviews and control validation exercises.
• Participate in initiatives to strengthen identity security and reduce access-related risk.
• Assist with implementation of identity security improvements and access controls.

Data Protection

• Support implementation and administration of data protection controls.
• Assist with data classification, information protection, and data loss prevention initiatives.
• Support security control testing, validation, and effectiveness reviews.
• Participate in data protection improvement initiatives.
• Assist with policy implementation and control enforcement activities.

Detection Engineering & Security Analytics

• Support implementation and improvement of security detection capabilities.
• Assist with development, tuning, and optimization of security alerts and detection use cases.
• Support collection, analysis, and validation of security telemetry and logs.
• Participate in threat-informed defense activities and control improvement initiatives.
• Contribute to enhancing detection coverage and security visibility.

Incident Response Support

• Provide engineering support during cybersecurity incident investigations and remediation activities.
• Assist with technical analysis and containment activities when required.
• Support post-incident remediation and control improvement initiatives.
• Participate in cyber incident response exercises and readiness testing.

Key Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or equivalent practical experience.
• 3 to 5 years of cybersecurity experience.
• Experience supporting enterprise cybersecurity technologies and controls.
• Practical experience in one or more of the following areas: security engineering, security platform administration, vulnerability management, identity and access security, data protection, or detection engineering.
• Experience working in enterprise IT or cybersecurity environments.

Preferred Certifications

• Industry-recognized cybersecurity certifications relevant to security engineering, cloud security, identity security, vulnerability management, or cybersecurity operations.
• Entry- to intermediate-level certifications demonstrating practical cybersecurity knowledge are preferred

Preferred Qualifications

• Experience implementing and administering enterprise cybersecurity technologies.
• Experience supporting cybersecurity engineering or security platform administration functions.
• Experience working with vulnerability management and remediation programmes.
• Familiarity with identity security, cloud security, endpoint security, and data protection concepts.
• Experience integrating, configuring, or optimizing security technologies and controls.
• Experience supporting security monitoring and detection capability improvements.
• Experience participating in cybersecurity projects and technology deployments.
• Understanding of cybersecurity governance, risk management, and compliance principles.
• Strong analytical, troubleshooting, and problem-solving skills.
• Strong written and verbal communication skills.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

At JSC, you can play a role in our business success. We understand that key to our success is our people, which is our foundation and priority. We invest in our people to ensure we have the right talent with the leadership and strategic skills the company needs for the future.

We are an equal opportunity employer and do not discriminate on the grounds of sex, race, disability, family status or any other factors.

Come and explore with us!