Cybersecurity Operations Engineer (SecOps)

RecruitNest Consulting; Taguig; On-site; PHP 1,200,000 - 1,600,000; Full time

Job summary

RecruitNest Consulting seeks a Senior/Lead SecOps Engineer to join a client’s Cybersecurity team in Taguig. You will monitor security events, investigate incidents, and support vulnerability management across SOC, IAM, and security operations.

The role is fully onsite in BGC, Taguig with a mid-shift weekday schedule. Candidates should have 4+ years in security operations and relevant certifications; GIAC, Security+, or CySA+ are advantageous.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.
• Ability to work effectively with cross-functional teams in a fast-paced security operations environment.

Responsibilities

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Skills

Analytical thinking

Troubleshooting

Problem solving

Threat analysis

Incident response

Cross-functional collaboration

Security operations

Security operations center

Education

Bachelor's degree in Computer Science/Information Technology

Tools

SIEM

EDR

Vulnerability Management

IAM

Job description

Job Expectations:

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job:

We are looking for a SecOps Engineer Senior Associate to join our client's Cybersecurity team and help protect critical systems and sensitive data from evolving cyber threats. In this role, you will support security operations, investigate security incidents, monitor security platforms, and contribute to vulnerability management and threat detection initiatives. You will work closely with internal teams and clients to strengthen security controls, respond to incidents, and improve overall cybersecurity resilience.

Key Responsibilities:

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.
• Ability to work effectively with cross-functional teams in a fast-paced security operations environment.