Information Security Engineer

MEGA PRIME FOODS INCORPORATED; Philippines; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

MEGA PRIME FOODS INCORPORATED in the Philippines is seeking an Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure, with hands-on responsibility for evaluating architectures, deploying controls, and securing multi-cloud/on-prem environments.

In this role you will partner with IT and DevOps to build secure networks, manage IAM, deploy SIEM/EDR/IPS, and automate checks with scripts, while aligning with NIST, ISO 27001, SOC 2.

Qualifications

• Bachelor's Degree in Cybersecurity, Computer Science, IT, or related field.
• 5+ years in system administration, network security, or SOC with exposure to security design.
• Hands-on experience with firewalls, identity management, cloud configurations, and IaC.
• Certifications preferred: CompTIA Security+, CySA+, AWS Security, CCNA Security, GSEC.
• Strong problem-solving and defensive engineering mindset.

Responsibilities

• Architecture & Infrastructure Implementation: design, configure, and maintain secure network architectures, firewalls, IAM policies, and cloud infrastructure (AWS/Azure/GCP).
• Vulnerability & Threat Management: risk assessments, system audits, and vulnerability scans to identify gaps and automate remediation paths.
• Security Control Integration: Deploy, monitor, and tune SIEM, EDR, IPS, and DLP tools.
• Incident Response & Automation: respond to security alerts, conduct root-cause analysis, and write scripts to automate security checks.
• Governance & Standards: enforce security baselines, SOPs, and compliance alignment (NIST, ISO 27001, SOC 2).

Skills

Security design

Cloud security

Vulnerability management

Automation with scripting

Incident response mindset

Education

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Active Directory

Okta

AWS

Azure

GCP

IaC (Terraform)

Firewalls

Job description

Role Overview

We are seeking an operational Information Security Engineer to design, implement, and maintain our core cybersecurity infrastructure. In this role, you will take hands-on responsibility for evaluating system architectures, deploying security controls, and configuring network/cloud environments against emerging threats.

If you are a driven security practitioner eager to step into architectural design, apply security frameworks, and protect multi-cloud/on-prem environments, this role provides immediate ownership and high growth potential across our technical stack.

Key Responsibilities

• Architecture & Infrastructure Implementation: Partner with IT and DevOps teams to design, configure, and maintain secure network architectures, firewalls, IAM policies, and cloud infrastructure (AWS/Azure/GCP).

• Vulnerability & Threat Management: Conduct risk assessments, system audits, and vulnerability scans to identify architectural gaps and implement automated remediation paths.

• Security Control Integration: Deploy, monitor, and tune SIEM, Endpoint Detection & Response (EDR), Intrusion Prevention (IPS), and data loss prevention tools.

• Incident Response & Automation: Assist in responding to security alerts, conducting root-cause analysis, and writing scripts (Python, Bash, PowerShell) to automate security checks.

• Governance & Standards: Help enforce organizational security baselines, standard operating procedures, and compliance alignment (NIST, ISO 27001, SOC 2).

Qualifications

• Education: Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.

• Experience Level: 5+ years of experience in system administration, network security, or security operations (SOC), with early exposure to security design or cloud infrastructure.

• Technical Skills: Hands-on experience with firewalls, identity management (Active Directory/Okta), cloud security configurations, and infrastructure-as-code principles.

• Certifications (Preferred): CompTIA Security+, CySA+, AWS Certified Security, or early-stage Security/Network certifications (e.g., CCNA Security, GSEC).

• Mindset: Strong technical curiosity, proactive problem-solving ability, and a structured approach to defensive engineering.