Endpoint Security Service Owner - Hybrid Engineer (Wazuh)

Avaloq Group; Philippines; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Hybrid and flexible working

Global exposure

Job summary

Avaloq Group is seeking an hands-on Endpoint Security Service Owner (Engineer) to join its Security Operations team. You will operate and enhance endpoint security services across cloud and hybrid-cloud environments for a global financial services organization.

You will work with Wazuh, ClamAV and Defender to ensure strong protection, visibility and threat detection. This role requires independent ownership and collaboration with Security Operations and Infrastructure teams.

Qualifications

• Must have hands-on experience deploying, configuring, and administering Wazuh in enterprise environments.
• Experience managing and troubleshooting ClamAV.
• Strong understanding of endpoint security, threat detection, and incident response.

Responsibilities

• Own and operate the Endpoint Security service across environments.
• Deploy, configure, and maintain Wazuh on Linux and Windows.
• Manage ClamAV deployments and endpoints security agents.
• Support and improve EDR/XDR capabilities including Defender.
• Monitor platform health, coverage, and telemetry.
• Assist threat investigations and incident remediation.
• Automate operational tasks to improve efficiency.
• Collaborate with Security Operations, Infrastructure, Cloud, and Incident Management teams.

Skills

English proficiency

Troubleshooting

Analytical thinking

Independent working

Tools

Wazuh

ClamAV

Microsoft Defender

Linux administration

Bash

Python

PowerShell

Job description

Avaloq Group is seeking an hands-on Endpoint Security Service Owner (Engineer) to join its Security Operations team. You will operate and enhance endpoint security services across cloud and hybrid-cloud environments for a global financial services organization.

You will work with Wazuh, ClamAV and Defender to ensure strong protection, visibility and threat detection. This role requires independent ownership and collaboration with Security Operations and Infrastructure teams.