Cybersecurity Engineer

Xerox Philippines; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Xerox Philippines is seeking a cybersecurity IT professional to secure enterprise information systems, automate threat detection, and collaborate with cross‑functional teams. You will model threats with MITRE ATT&CK, implement secure SDLC practices, and drive automation across security tooling and identity management.

You will work with DevOps and incident response teams to strengthen protections, educate staff, and adapt to evolving threat landscapes in a fast-paced setting.

Qualifications

• Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.
• Experience with programming languages with proficiency on Python scripting.
• Experience with MITRE ATT&CK, ISO, NIST Frameworks.
• Experience with Scale Agile Framework processes and methodologies for implementations.
• Strong understanding of cloud platforms and technologies.
• Excellent organizational, communication, documentation, and project management skills.
• Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.

Responsibilities

• Implement controls and secure enterprise information systems via secure software development and deployment processes.
• Build connectors between SaaS and on‑premises apps with identity management tools.
• Assist security operations during incident response or BCP via automation scripts.
• Evaluate and improve security controls around email, information, network and cloud app protections through automation.
• Develop and maintain security automation and tooling.
• Stay current on threats and adjust security measures accordingly.
• Analyze automation scripts to improve security of information systems.
• Review after action reports, tabletop, red team and pen test findings to develop mitigations.
• Participate in security threat intelligence and assess solutions.
• Coordinate with DevOps to promote secure coding and raise concerns on poor coding practices.
• Educate and train staff on information system security best practices as a security advocate.

Skills

Secure coding practices

SDLC

DevOps principles

Cloud computing

Python scripting

MITRE ATT&CK

ISO / NIST frameworks

Scaled Agile Framework

Cloud platforms understanding

Security communication

Education

Bachelor's degree in computer science, Engineering, Cybersecurity, or related field

Tools

Security automation tooling

Identity management tools

Job description

About Xerox Holdings Corporation

For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we've expanded into software and services to sustainably power the hybrid workplace of today and tomorrow. Today, Xerox is continuing its legacy of innovation to deliver client-centric and digitally-driven technology solutions and meet the needs of today's global, distributed workforce. From the office to industrial environments, our differentiated business and technology offerings and financial services are essential workplace technology solutions that drive success for our clients. At Xerox, we make work, work. Learn more about us at www.xerox.com.

We are looking for a cybersecurity information technology professional who wants to join a team that knows technology, build processes, and spends their day securing Lexmark. This individual will work with various cybersecurity and project teams to make sure policies and controls are implemented and operationalized. They will also be responsible for working with cybersecurity architects to do threat models and risk mitigation strategies for various initiatives. They will also work with the cybersecurity operations teams to understand threats and improve processes by automating threat hunting and alert management. You will need to be proficient in security automation and tooling, and possess strong communication skills, enabling you to collaborate effectively with various stakeholders while balancing competing priorities. This role presents a unique opportunity to contribute your expertise and experience to a fast-paced, innovative environment, and make a significant impact in ensuring the security of our organization's technology infrastructure.

What You Will Be Doing

• Responsible for implementing controls and securing enterprise information systems by developing and reviewing security requirements and technology solutions. Design and implement these controls using secure software development and deployment processes.


• Build and develop connectors between SaaS and on-premises applications with identity management tools.


• Assist security operation teams during incident response or business continuity scenarios through building automation scripts to reduce or close security incidents.


• Evaluate and improve security controls around email, information, network, and cloud app protections through automation.


• Develop and maintain security automation and tooling.


• Stay up to date with emerging security threats and trends and adjust security measures accordingly.


• Analyze and build automation scripts to improve security of information systems.


• Analyze after action reviews, tabletop, red team, and penetration testers reports to develop risk mitigations.


• Participate and validate security threat intelligence and assess solutions.


• Coordinate with DevOps teams to advocate secure coding practices, and to elevate concerns related to poor coding practices.


• Educate and train staff on information system security best practices by being a security advocate.

Must-have Qualifications, Skills, Experience

• Strong knowledge of secure coding practices, SDLC, DevOps principles, and cloud computing.


• Experience with programming languages with proficiency on Python scripting.


• Experience with MITRE ATT&CK, ISO, NIST Frameworks.


• Experience with Scale Agile Framework processes and methodologies for implementations.


• Strong understanding of cloud platforms and technologies.


• Excellent organizational, communication, documentation, and project management skills.


• Excellent communication and interpersonal skills, with the ability to work effectively in a team environment.

Educational Qualifications

• Bachelor's degree in computer science, Engineering, Cybersecurity, or related field.

Years Of Experience In This Field

• 3+ years of Information Technology experience.