IT Security Engineer: Azure, EDR & Cloud Guard

Cloudstaff; Metro Manila; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Health insurance

Flexible leave credits

Annual salary review

Office perks • Free Coffee & Meals

Job summary

Cloudstaff in the Philippines seeks a full-time IT Security Engineer to implement, configure, and monitor security systems, focusing on threat detection, incident response, vulnerability management, and the ongoing protection of data and operations.

You will manage Microsoft Entra ID, Intune, Jamf, patching, endpoint hardening, Azure policies, and RBAC, while collaborating with cross-functional teams to enforce security standards and drive continuous improvements.

Qualifications

• Proven experience as an IT Security Engineer or similar role.
• Proficiency in Security and Cloud tooling such as EDR, SIEM, and Azure security features.
• Proficiency in security practices such as DMARC, SPF, and DKIM.

Responsibilities

• Microsoft Entra ID administration and governance.
• Management and deployment of MDM tools such as Intune & Jamf.
• Patch management and vulnerability remediation for all enterprise systems.
• Implementation of endpoint hardening practices.
• Monitor enterprise application governance, including policy creation, approval workflows, and ensuring compliance with company security standards.
• Azure conditional access configuration and policy enforcement.
• RBAC and SSO setup for secure access control.
• Conduct monthly security audits and vulnerability assessments.
• Coordinate remediation with relevant teams after findings.

Skills

EDR

SIEM

Azure security

DMARC SPF DKIM

Incident response

Endpoint protection

Tools

Microsoft Entra ID

Intune

Jamf

Job description

Cloudstaff in the Philippines seeks a full-time IT Security Engineer to implement, configure, and monitor security systems, focusing on threat detection, incident response, vulnerability management, and the ongoing protection of data and operations.

You will manage Microsoft Entra ID, Intune, Jamf, patching, endpoint hardening, Azure policies, and RBAC, while collaborating with cross-functional teams to enforce security standards and drive continuous improvements.