Cybersecurity Engineer

Xerox Corporation; Cebu City; On-site; PHP 800,000 - 1,000,000; Full time

Job summary

Xerox Corporation is seeking a cybersecurity information technology professional to join a fast-paced team dedicated to securing enterprise information systems and building automation that protects our hybrid infrastructure.

You will design secure solutions, automate threat hunting, and partner with DevOps and security operations to implement best practices, threat models, and risk mitigations across cloud and on‑prem environments.

Qualifications

• Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.
• Experience with programming languages with proficiency on Python scripting.
• Experience with MITRE ATT&CK, ISO, NIST Frameworks.
• Experience with Scale Agile Framework processes and methodologies for implementations.

Responsibilities

• Responsible for implementing controls and securing enterprise information systems by developing and reviewing security requirements and technology solutions. Design and implement these controls using secure software development and deployment processes.
• Build and develop connectors between SaaS and on-premises applications with identity management tools.
• Assist security operation teams during incident response or business continuity scenarios through building automation scripts to reduce or close security incidents.
• Evaluate and improve security controls around email, information, network, and cloud app protections through automation.
• Develop and maintain security automation and tooling.
• Stay up to date with emerging security threats and trends and adjust security measures accordingly.
• Analyze and build automation scripts to improve security of information systems.
• Analyze after action reviews, tabletop, red team, and penetration testers reports to develop risk mitigations.
• Participate and validate security threat intelligence and assess solutions.
• Coordinate with DevOps teams to advocate secure coding practices, and to escalate concerns related to poor coding practices.
• Educate and train staff on information system security best practices by being a security advocate.

Skills

Secure coding

SDLC

DevOps

Cloud computing

Python scripting

MITRE ATT&CK

ISO standards

NIST frameworks

SAFe

Communication

Project management

Education

Bachelor's degree

Job description

About Xerox Holdings Corporation
For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work.Learn more about us at www.xerox.com .

We are looking for a cybersecurity information technology professional who wants to join a team that knows technology, build processes, and spends their day securing Lexmark. This individual will work with various cybersecurity and project teams to make sure policies and controls are implemented and operationalized. They will also be responsible for working with cybersecurity architects to do threat models and risk mitigation strategies for various initiatives. They will also work with the cybersecurity operations teams to understand threats and improve processes by automating threat hunting and alert management. You will need to be proficient in security automation and tooling, and possess strong communication skills, enabling you to collaborate effectively with various stakeholders while balancing competing priorities. This role presents a unique opportunity to contribute your expertise and experience to a fast-paced, innovative environment, and make a significant impact in ensuring the security of our organization's technology infrastructure.

WHAT YOU WILL BE DOING

• Responsible for implementing controls and securing enterprise information systems by developing and reviewing security requirements and technology solutions. Design and implement these controls using secure software development and deployment processes.
• Build and develop connectors between SaaS and on-premises applications with identity management tools.
• Assist security operation teams during incident response or business continuity scenarios through building automation scripts to reduce or close security incidents.
• Evaluate and improve security controls around email, information, network, and cloud app protections through automation.
• Develop and maintain security automation and tooling.
• Stay up to date with emerging security threats and trends and adjust security measures accordingly.
• Analyze and build automation scripts to improve security of information systems.
• Analyze after action reviews, tabletop, red team, and penetration testers reports to develop risk mitigations.
• Participate and validate security threat intelligence and assess solutions.
• Coordinate with DevOps teams to advocate secure coding practices, and to escalate concerns related to poor coding practices.
• Educate and train staff on information system security best practices by being a security advocate.

MUST-HAVE QUALIFICATIONS, SKILLS, EXPERIENCE

• Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.
• Experience with programming languages with proficiency on Python scripting.
• Experience with MITRE ATT&CK, ISO, NIST Frameworks.
• Experience with Scale Agile Framework processes and methodologies for implementations.
• Strong understanding of cloud platforms and technologies.
• Excellent organizational, communication, documentation, and project management skills.
• Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.

EDUCATIONAL QUALIFICATIONS

• Bachelor's degree in computer science, Engineering, Cybersecurity, or related field.

YEARS OF EXPERIENCE IN THIS FIELD

• 3+ years of Information Technology experience.