IT Security Officer: Cloud, CI/CD & Incident Response

Astek; Santo Niño 1st; On-site; PHP 600,000 - 900,000; Full time

Job summary

Astek in the Philippines is seeking a Security Engineer to advance our product security posture across multiple environments. You will contribute to threat modelling, incident response, vulnerability validation, and remediation planning while aligning with compliance requirements.

The role emphasizes automation, CI/CD security, and secure cloud practices, with ongoing improvements to detection rules and runbooks to support secure software delivery.

Responsibilities

• Perform routine reporting and dashboarding activities, leveraging automation to improve efficiency
• Support the review of VAPT findings and contribute to remediation planning
• Validate security vulnerabilities and findings from various assessment reports
• Refine incident response playbooks
• Contribute to compliance-related documentation and evidence collection
• Assist in implementing security controls and operational security tasks
• Participate in threat modelling exercises and identify security requirements from policies
• Perform periodic IAM role reviews to ensure least privilege access principles
• Apply security standards and controls across CI/CD pipelines, Kubernetes platforms, and cloud environments
• Support incident response activities and elevate complex issues appropriately
• Perform alert triage and assist in investigations across security monitoring platforms
• Contribute to refining detection rules, playbooks, and response runbooks
• Support guided threat hunting activities to identify potential indicators of compromise
• Deliver POCs or features spanning multiple components while balancing security, performance, and maintainability
• Utilise code and cloud security analysis tools and remediate findings appropriately
• Recommend improvements to enhance product security, performance, and team efficiency

Skills

Security operations

Threat modelling

Incident response

Vulnerability management

CI/CD security

Cloud security

Kubernetes security

Automation

Remediation planning

Compliance awareness

Tools

Kubernetes

Cloud environments

CI/CD pipelines

Job description

Astek in the Philippines is seeking a Security Engineer to advance our product security posture across multiple environments. You will contribute to threat modelling, incident response, vulnerability validation, and remediation planning while aligning with compliance requirements.

The role emphasizes automation, CI/CD security, and secure cloud practices, with ongoing improvements to detection rules and runbooks to support secure software delivery.