Hybrid SOC Engineer: SIEM & Cloud Security Lead

Cloudstaff Philippines Inc.; Metro Manila; Hybrid; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

Comprehensive health and lifeinsurance

Up to 24 leave credits per year

Flexible leave credits for vacation/sx

Company-provided PC/Laptop and fiber]

Weekly office perks: Free Coffee,Meals

Career advancement opportunities

In-house psychiatrist for wellbeing

Job summary

Cloudstaff Philippines Inc. is seeking a Security Operations Engineer to manage and optimize the security stack across Microsoft 365, Azure, and AWS.

You will work closely with the SOC Analyst to tune SIEM metrics and lead vulnerability and patch management, ensuring robust endpoint protection and reliable backups. The role requires hands-on experience with Rapid7 or Microsoft Defender for Cloud, plus strong familiarity with Intune, Entra ID and cloud security controls.

Qualifications

• Demonstrated experience operating SIEM platforms such as Rapid7 or Microsoft Sentinel.

Responsibilities

• Operate and tune the Rapid7 SIEM and ingest logs from Microsoft Entra ID, Microsoft 365, AWS CloudTrail and AWS GuardDuty.
• Lead vulnerability and patch management using Rapid7 and Defender for Cloud across Azure/AWS.
• Run patch management via Microsoft Intune for workstations and AWS Systems Manager for SOHO and digital apps.
• Coordinate with SOC Analyst to tune metrics and feed SIEM with refined data.
• Ensure endpoint protection with EDR tools (CrowdStrike or Defender) and maintain application whitelisting.
• Validate backups with Veeam and AWS Backup for Microsoft 365 and AWS workloads.

Skills

SIEM operations

Vulnerability management

EDR

Cloud security

M365 Defender/Azure security

Tools

Rapid7

Microsoft Defender for Cloud

Microsoft Intune

Azure

AWS

Netskope

Veeam

Job description

Cloudstaff Philippines Inc. is seeking a Security Operations Engineer to manage and optimize the security stack across Microsoft 365, Azure, and AWS.

You will work closely with the SOC Analyst to tune SIEM metrics and lead vulnerability and patch management, ensuring robust endpoint protection and reliable backups. The role requires hands-on experience with Rapid7 or Microsoft Defender for Cloud, plus strong familiarity with Intune, Entra ID and cloud security controls.