Cybersecurity Operations Engineer

RecruitNest Consulting; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

RecruitNest Consulting is seeking a SecOps Engineer Senior Associate to join the client’s Cybersecurity team in Taguig. The role supports security operations, incident response, monitoring platforms, and vulnerability management to strengthen defenses and resilience for critical systems and data.

You will work with internal teams and clients to investigate incidents, improve detection, and drive continuous security improvements across SOC, IAM, and SecOps functions.

Qualifications

• Bachelor's degree in computer science, information technology, or related field.
• 4+ years of cybersecurity, security operations, incident response experience.
• 3+ years in SOC/SecOps, IAM, or vulnerability management environments.
• Experience with SIEM, EDR, vulnerability management, and IAM platforms.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.

Responsibilities

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and risk.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop detection logic, correlation rules, and monitoring use cases to improve threat detection.
• Conduct vulnerability assessments and support remediation activities within vulnerability management programs.
• Manage daily health checks of security tools, scanners, and security controls.
• Maintain incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve issues and strengthen defenses.
• Document incidents, investigations, and platform changes in detail.
• Support SOC, IAM, and SecOps process improvements.

Skills

Cybersecurity

Security operations

Incident response

Threat analysis

SIEM & EDR

Education

Bachelor's Degree in CS/IT

Tools

SIEM

EDR

Vulnerability Management

IAM platforms

Job description

Job Expectations:

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job:

We are looking for a SecOps Engineer Senior Associate to join our client's Cybersecurity team and help protect critical systems and sensitive data from evolving cyber threats. In this role, you will support security operations, investigate security incidents, monitor security platforms, and contribute to vulnerability management and threat detection initiatives. You will work closely with internal teams and clients to strengthen security controls, respond to incidents, and improve overall cybersecurity resilience.

Key Responsibilities:

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.
• Ability to work effectively with cross-functional teams in a fast-paced security operations environment.