InfoSec Engineer — IAM, Endpoint Security & Automation

Athena; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Athena is seeking an Information Security Engineer to scale our security program in a fast‑growing environment. The role focuses on IAM, endpoint security, SaaS security, and infrastructure protection across cloud‑first environments.

The ideal candidate is hands‑on, automation‑minded, and collaborates with IT, Engineering, Infrastructure, HR, and Compliance to strengthen controls while preserving a positive employee experience.

Qualifications

• 4+ years of information security, security engineering, IT security, or related fields.
• Experience administering enterprise identity providers and access management systems.
• Experience with endpoint management and endpoint security tooling.
• Familiarity with security monitoring, logging, and incident response workflows.
• Strong understanding of authentication protocols and identity security concepts (SAML, OIDC, OAuth, SCIM, MFA, conditional access, RBAC).
• Experience working in cloud‑first environments using modern SaaS platforms.
• Strong scripting or automation experience using Python, Bash, PowerShell, or similar.
• Ability to balance security requirements with operational usability and business needs.

Responsibilities

• Design, implement, and improve identity and access management controls across enterprise applications and infrastructure.
• Manage and optimize SSO, MFA, lifecycle management, conditional access, RBAC, and privileged access workflows.
• Partner with IT and business stakeholders to implement least‑privilege access models.
• Support onboarding, offboarding, and automated provisioning/deprovisioning workflows.
• Conduct periodic access reviews and help drive remediation efforts.
• Improve authentication security and identity posture across corporate systems.
• Secure and manage corporate endpoints across macOS, Windows, and cloud‑managed environments.
• Improve endpoint visibility, hardening, monitoring, and response capabilities.
• Help implement and tune modern endpoint protection, browser security, device trust, and web/data protection controls.
• Partner with Infrastructure and IT teams on secure configuration standards and operational improvements.
• Support security initiatives related to enterprise SaaS applications and collaboration platforms.
• Assist with vendor and third‑party security evaluations related to enterprise tooling.
• Assist with security monitoring, detection engineering, and incident response activities.
• Improve log visibility and telemetry coverage across identity, endpoint, and SaaS platforms.
• Build and maintain detections, alerts, and operational playbooks.
• Participate in incident investigations and post‑incident remediation efforts.
• Help operationalize security metrics and reporting.
• Build automations and integrations that improve security operations efficiency.
• Develop scripts and workflows to reduce manual processes.
• Partner with Engineering and Infrastructure teams to improve security guardrails and operational maturity.
• Contribute to infrastructure‑as‑code and policy‑as‑code initiatives where applicable.
• Support security compliance initiatives such as SOC 2, ISO 27001, or similar frameworks.
• Help document technical controls, processes, and operational procedures.
• Participate in risk assessments and remediation tracking.
• Contribute to security awareness and internal enablement efforts.

Skills

Identity management

Access management

SAML

OIDC

OAuth

RBAC

MFA

Scripting

Python

Automation

Tools

Python

Bash

PowerShell

SIEM

EDR

MDM/UEM

Job description

Athena is seeking an Information Security Engineer to scale our security program in a fast‑growing environment. The role focuses on IAM, endpoint security, SaaS security, and infrastructure protection across cloud‑first environments.

The ideal candidate is hands‑on, automation‑minded, and collaborates with IT, Engineering, Infrastructure, HR, and Compliance to strengthen controls while preserving a positive employee experience.