Cybersecurity Operations Engineer (SecOps)

RecruitNest Consulting; Taguig; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

RecruitNest Consulting in Taguig City (Metro Manila) seeks a SecOps Engineer Senior Associate to join our client's cybersecurity team and defend critical systems from cyber threats. You will monitor events, investigate incidents, and help strengthen security controls while engaging with internal teams and clients.

The role emphasizes detection logic development, threat analysis, and vulnerability management across SOC, IAM, and SecOps disciplines, with opportunities for growth in a fast-paced

Qualifications

• Bachelor's degree in CS/IT or related field
• 4+ years in cybersecurity, security operations, incident response or related areas
• 3+ years in SOC/SecOps/IAM or Vulnerability Management environments
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms
• Experience creating detection logic, correlation rules, and conducting threat analysis
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics
• Strong analytical, troubleshooting, and problem-solving skills
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage

Responsibilities

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Skills

SIEM

EDR

Vulnerability Management

IAM

Threat Analysis

Incident Response

Digital Forensics

Network Forensics

Cross-functional teamwork

Education

Bachelor's Degree in Computer Science / IT or related field

Job description

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job

We are looking for a SecOps Engineer Senior Associate to join our client's Cybersecurity team and help protect critical systems and sensitive data from evolving cyber threats. In this role, you will support security operations, investigate security incidents, monitor security platforms, and contribute to vulnerability management and threat detection initiatives. You will work closely with internal teams and clients to strengthen security controls, respond to incidents, and improve overall cybersecurity resilience.

Key Responsibilities

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.
• Ability to work effectively with cross-functional teams in a fast-paced security operations environment.