Cybersecurity Operations Engineer

RecruitNest Consulting; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

RecruitNest Consulting is seeking a Senior/Lead SecOps Engineer Associate to strengthen security operations for a global accounting firm client. You will monitor security events, investigate incidents, and contribute to vulnerability management and threat detection initiatives, working closely with internal teams and clients to enhance cybersecurity resilience.

Role requires 4+ years in security operations, hands-on SOC/IAM experience, and strong incident response skills.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 4+ years in cybersecurity, security operations, incident response, or related areas.
• 3+ years in SOC/SecOps/IAM or Vulnerability Management environments.

Responsibilities

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across SOC, IAM, and SecOps functions.

Skills

SIEM

EDR

Vulnerability Management

IAM platforms

Threat analysis

Incident response

Security Operations

Cross-functional collaboration

Education

Bachelor's Degree in CS/IT

Tools

SIEM

EDR

Vulnerability Management

IAM platforms

Job description

Job Expectations:

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job:

We are looking for a SecOps Engineer Senior Associate to join our client's Cybersecurity team and help protect critical systems and sensitive data from evolving cyber threats. In this role, you will support security operations, investigate security incidents, monitor security platforms, and contribute to vulnerability management and threat detection initiatives. You will work closely with internal teams and clients to strengthen security controls, respond to incidents, and improve overall cybersecurity resilience.

Key Responsibilities:

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.
• Ability to work effectively with cross-functional teams in a fast-paced security operations environment.