Endpoint Security Service Owner Engineer (Wazuh Expert)

Avaloq; Makati; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid work model

Flexible working hours

Job summary

Avaloq is seeking an hands-on Endpoint Security Service Owner to operate and improve endpoint security across cloud and hybrid environments for a global financial services organization.

You will work with Wazuh, ClamAV, and Microsoft Defender to ensure robust protection, visibility, and threat detection. The role combines engineering, operation, automation, and collaboration with Security Operations, Infrastructure, Cloud, and Incident Management teams.

Qualifications

• Hands-on experience deploying, configuring, and administering Wazuh in enterprise environments.
• Experience managing and troubleshooting ClamAV.
• Understanding of endpoint security, threat detection, and incident response.
• Experience with Linux administration and security tooling.
• Scripting or automation experience (Bash, Python, PowerShell).
• Familiarity with Defender or other EDR/XDR platforms.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to work independently and collaborate with global teams.
• Proficiency in written and spoken English.

Responsibilities

• Own and operate the Endpoint Security service across cloud and on-prem environments.
• Deploy, configure, and maintain Wazuh across Linux and Windows environments.
• Manage and optimize ClamAV deployments and endpoint agents.
• Support and enhance EDR/XDR capabilities including Microsoft Defender.
• Monitor health, coverage, and telemetry of endpoints.
• Assist threat investigations, incident response, and remediation.
• Automate operational tasks and improve service efficiency.

Skills

Independent work

English communication

Problem solving

Tools

Wazuh

ClamAV

Microsoft Defender

Linux

Scripting (Bash/Python/PowerShell)

Job description

Avaloq is seeking an hands-on Endpoint Security Service Owner to operate and improve endpoint security across cloud and hybrid environments for a global financial services organization.

You will work with Wazuh, ClamAV, and Microsoft Defender to ensure robust protection, visibility, and threat detection. The role combines engineering, operation, automation, and collaboration with Security Operations, Infrastructure, Cloud, and Incident Management teams.