IT Security Engineer I WFO I APAC Shift I Makati

Cloudstaff; Makati; On-site; PHP 800,000 - 1,400,000; Full time

Benefits offered by this job

Health insurance

Flexible leave credits

Company-provided PC/Laptop

Internet stipend

Job summary

Cloudstaff is seeking a full-time IT Security Engineer for our Makati office. You will implement, configure, and monitor security systems to protect company data and operations.

Key duties include managing Entra ID, MDM tools, vulnerability remediation, and incident response. You will collaborate with teams to enforce security policies and run monthly audits.

Qualifications

• Experience with endpoint protection and incident response.
• Security-focused project experience from planning to implementation.
• Willingness to stay current with cyber security trends.

Responsibilities

• Manage Microsoft Entra ID governance and access control.
• Deploy and manage MDM tools (Intune, Jamf).
• Patch management and vulnerability remediation for enterprise systems.
• Implement endpoint hardening and secure configurations.
• Monitor security alerts from Defender for Cloud, CrowdStrike, Mimecast.
• Govern enterprise app governance, policy creation and compliance.
• Configure Azure conditional access and enforce policies.
• Manage NSG and firewall rules for secure traffic.
• Implement SAML/SSO integrations with enterprise apps.
• Carry out monthly security audits and vulnerability assessments.
• Collaborate with teams to remediate findings.

Skills

Endpoint protection

Incident response

Security projects

Independent work

Education

Certifications: CompTIA Security+, Azure Security Engineer

Tools

Microsoft Entra ID

Intune

Jamf

Defender for Cloud

CrowdStrike Falcon

Mimecast

Azure conditional access

NSG

SAML / SSO

RBAC

Job description

Job Description

This is a work in the office role based in Makati.

IT Security Engineer

We are seeking a full-time IT Security Engineer to join our team in the Philippines office. The IT Security Engineer will be responsible for the implementation, configuration, maintenance, and monitoring of security systems and processes, including threat detection, incident response, and vulnerability management. This role is critical in ensuring the security and integrity of systems and data to support day-to-day business operations.

Key Responsibilities

System Management

• Microsoft Entra ID administration and governance

• Management and deployment of MDM tools such as Intune & Jamf

• Patch management and vulnerability remediation for all enterprise systems

• Implementation of endpoint hardening practices

Security alerts

• Monitor and respond to security alerts from tools such as Defender for Cloud, CrowdStrike Falcon, and Mimecast to ensure real-time threat detection and mitigation.

• Monitor enterprise application governance, including policy creation, approval workflows, and ensuring compliance with company security standards.

Cloud / Azure security administration

• Azure conditional access configuration and policy enforcement

• NSG (Network Security Group) and firewall rule administration for secure traffic management

• SAML, SSO (Single Sign-On) setup, and integration with enterprise applications

• Management of role-based access control (RBAC) to ensure secure and appropriate access levels

Governance

• Conduct monthly audits to evaluate the effectiveness of existing security measures and ensure compliance with organizational policies.

• Perform comprehensive vulnerability assessments to identify, document, and address potential weaknesses within the system.

• Collaborate with relevant teams to implement remediation plans and monitor progress in resolving identified vulnerabilities.

Required Experience

• Experience in managing endpoint protection solutions and implementing robust incident response strategies.Security Projects

• Demonstrated expertise in security-focused projects, from initial planning and resource allocation to successful implementation and completion.

• Actively seeks out innovative security projects and initiatives, evaluating their potential impact on organizational goals.

• Provides well-rounded recommendations by analyzing the pros and cons of proposed security measures to ensure informed decision-making.

Qualifications and Requirements

• Certifications such as CompTIA Security+, Microsoft Certified: Azure Security Engineer.

• Ability to work independently and as part of a team.

• Genuine interest in cyber security and emerging technologies, paired with a commitment to staying informed about the latest trends and threats in the field.

Perks and Benefits

• Comprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment
• Flexible leave credits which may be used for vacation, emergency and sick leaves
• Quarterly perks boxes for WFH staff, offering groceries and snacks to keep you fueled
• Superb and exciting Mid-Year Parties – with items to give away and cash prizes!
• Endless opportunities for career advancement
• We set you up for success with a company-provided PC/Laptop and fiber internet connection
• Tech-on-wheels Support
• Participate and join our CS Social Clubs and Special Interest Groups to connect with colleagues
• International career growth and connections
• Unlimited cash incentives for hired referrals
• Mental Wellness Employee Assistance program through Lifeworks
• In-house psychiatrist available to support employees' well-being
• Become part of the Employee Share Units program
• Cloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc