Cybersecurity Engineer

Xerox

Cebu City

On-site

PHP 700,000 - 1,000,000

Full time

3 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Xerox Cebu is seeking a cybersecurity information technology professional to join a team that builds secure, scalable systems and automates threat detection. You will work with cybersecurity architects and DevOps to implement controls, threat models, and risk mitigations while collaborating across stakeholders.

The role requires a Bachelors in CS or related field and at least 3 years IT security experience, with strong knowledge of secure coding, cloud platforms, and security frameworks.

Qualifications

Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.
Experience with programming languages with proficiency on Python scripting.
Experience with MITRE ATT&CK, ISO, NIST Frameworks.
Experience with Scale Agile Framework processes and methodologies for implementations.
Strong understanding of cloud platforms and technologies.
Excellent organizational, communication, documentation, and project management skills.
Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.

Responsibilities

Implement security controls and secure enterprise information systems using secure development and deployment processes.
Build connectors between SaaS and on-premises apps with identity management tools.
Assist security operations during incident response through automation scripts.
Evaluate and improve security controls around email, network, and cloud protections via automation.
Develop and maintain security automation and tooling.
Stay updated on emerging threats and adjust security measures accordingly.
Analyze action reviews, tabletop, red team, and pen-test reports for risk mitigations.
Coordinate with DevOps to promote secure coding practices.

Skills

Secure coding practices

SDLC

DevOps principles

Cloud computing

Python scripting

Communication skills

Team collaboration

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related field

Tools

MITRE ATT&CK

ISO/NIST Frameworks

Job description

Job Description:

Description & Requirements

About Xerox Holdings Corporation For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today’s global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work. Learn more about us at www.xerox.com

We are looking for a cybersecurity information technology professional who wants to join a team that knows technology, build processes, and spends their day securing Lexmark. This individual will work with various cybersecurity and project teams to make sure policies and controls are implemented and operationalized. They will also be responsible for working with cybersecurity architects to do threat models and risk mitigation strategies for various initiatives. They will also work with the cybersecurity operations teams to understand threats and improve processes by automating threat hunting and alert management. You will need to be proficient in security automation and tooling, and possess strong communication skills, enabling you to collaborate effectively with various stakeholders while balancing competing priorities. This role presents a unique opportunity to contribute your expertise and experience to a fast-paced, innovative environment, and make a significant impact in ensuring the security of our organizations technology infrastructure.

WHAT YOU WILL BE DOING

Responsible for implementing controls and securing enterprise information systems by developing and reviewing security requirements and technology solutions. Design and implement these controls using secure software development and deployment processes.
Build and develop connectors between SaaS and on-premises applications with identity management tools.
Assist security operation teams during incident response or business continuity scenarios through building automation scripts to reduce or close security incidents.
Evaluate and improve security controls around email, information, network, and cloud app protections through automation.
Develop and maintain security automation and tooling.
Stay up to date with emerging security threats and trends and adjust security measures accordingly.
Analyze and build automation scripts to improve security of information systems.
Analyze after action reviews, tabletop, red team, and penetration testers reports to develop risk mitigations.
Participate and validate security threat intelligence and assess solutions.
Coordinate with DevOps teams to advocate secure coding practices, and to eliminate concerns related to poor coding practices.
Educate and train staff on information system security best practices by being a security advocate.

MUST-HAVE QUALIFICATIONS, SKILLS, EXPERIENCE

Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.
Experience with programming languages with proficiency on Python scripting.
Experience with MITRE ATT&CK, ISO, NIST Frameworks.
Experience with Scale Agile Framework processes and methodologies for implementations.
Strong understanding of cloud platforms and technologies.
Excellent organizational, communication, documentation, and project management skills.
Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.

EDUCATIONAL QUALIFICATIONS