Incident & Automation Security Engineer (Azure Defender)

Qi Group; Pasig; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

Qi Group is seeking a cybersecurity professional in Pasig for incident response, security automation, and cloud security. You’ll investigate threats, respond to incidents, and build automated workflows using Microsoft Defender, Azure Sentinel, Azure Functions, and Logic Apps.

The role requires 2–5 years in Cybersecurity with hands-on Microsoft security experience, strong analytical skills, and the ability to work with regional/global teams.

Qualifications

• 2–5 years of cybersecurity experience in SOC, IR, threat hunting, or security operations.
• Hands-on experience with Microsoft security technologies and cloud environments.
• Strong analytical and troubleshooting skills.
• Experience automating security processes via scripting or workflow tools.
• Azure certifications with at least one security-focused credential preferred.
• Ability to work independently and collaborate with regional/global teams.

Responsibilities

• Investigate and respond to security alerts and incidents using Defender and Azure Sentinel.
• Perform threat hunting and identify indicators across the environment.
• Develop and enhance security automation, playbooks, and response workflows.
• Build automation solutions using Azure Functions, Logic Apps, scripting, and AI-enabled tools.
• Research emerging threats and security trends.
• Collaborate with IT teams to implement security best practices and Zero Trust.
• Support continuous improvement to strengthen the organisation's security posture.

Skills

Cybersecurity

SOC

Incident Response

Threat Hunting

Security Operations

Microsoft Security

Scripting

Automation

Azure Certifications

Azure Cloud

Tools

PowerShell

Azure Functions

Logic Apps

Job description

Qi Group is seeking a cybersecurity professional in Pasig for incident response, security automation, and cloud security. You’ll investigate threats, respond to incidents, and build automated workflows using Microsoft Defender, Azure Sentinel, Azure Functions, and Logic Apps.

The role requires 2–5 years in Cybersecurity with hands-on Microsoft security experience, strong analytical skills, and the ability to work with regional/global teams.