IT Security Specialist

SEAOIL Philippines, Inc.; Philippines; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

SEAOIL Philippines, Inc. is seeking an IT Security Specialist to oversee the full lifecycle of cybersecurity solutions. The role includes implementing security measures for both on-premises and cloud environments, managing incident responses, and ensuring compliance with industry standards. Ideal candidates will have experience with cloud security solutions, scripting skills, and relevant security certifications. This is a crucial position for maintaining the company's security posture and protecting its assets.

Qualifications

• Experience with both cloud-native and on-premises security solutions.
• Ability to respond to cyber threats and security alerts effectively.
• Strong understanding of cybersecurity compliance standards.

Responsibilities

• Maintain security components for hybrid environments.
• Implement security solutions for cloud and on-premises.
• Develop technical documentation for security processes.

Skills

Cloud-native security solutions

Incident response

Security frameworks knowledge

Communication skills

Scripting and automation

Education

Basic Security Training/Certification (ISC2 CC, Comptia Sec+)

Advanced Security Training/Certification (CEH, CISSP, CISM, ISC2 SCCP)

Tools

Azure

AWS

SIEM/SOAR tools

Job description

Are you ready to start your legaSEA? SEAOIL is looking for passionate talents to help make a difference in the lives of Filipinos and fuel their better future. Here’s your chance to grow your career with the largest and leading independent fuel company in the country—join us as our next IT Security Specialist!

What is this role about?

This role is responsible for the full lifecycle of cybersecurity solutions, from initial implementation to continuous improvement, guided by the Cybersecurity Manager’s strategy. Key duties include monitoring and enhancing the security of networks and applications, managing incident response and threat remediation, and ensuring the organization meets all industry compliance standards. A crucial part of this position is working with other teams to maintain and fortify robust security defenses.

What will YOU do?

• Maintain native security components on a hybrid environment (firewalls, network security groups, security lists, ACLs, WAFs) to protect network perimeters and secure both On-Prem and cloud resources against unauthorized access and common web attacks.
• Implement security solutions for hybrid cloud and on-premises environments to establish a robust security posture and ensure continuous protection and compliance as infrastructure evolves.
• Develop technical documentation (procedures, templates, runbooks, etc) to standardize security processes and enable consistent, repeatable operations for deployment and operational teams.
• Analyze performance of security systems to optimize system effectiveness and support effective incident response by identifying and resolving performance bottlenecks and security issues.
• Respond to cyber threats and security alerts to mitigate, contain, and resolve security incidents to prevent damage and protect the company’s assets.
• Conduct regular phishing simulation test to assess employee awareness of phishing threats and evaluate the effectiveness of security training.

What will YOU need?

• Working experience in cloud-native and on-premises security solutions including endpoint protection, SIEM/SOAR, identity access management, and threat intelligence.
• Experience with security configuration, monitoring, and incident response in environments such as Azure, AWS, and their native tool.
• Scripting and automation skills for configuration and operation tasks. Strong understanding of security frameworks and compliance standards like ISO 27001, NIST, SOC2, etc.
• Ability to develop documentation and educational materials for broader operational teams. Strong communication for articulating complex technical reports and collaborating with stakeholders.
• Basic Security Training/Certification such as ISC2 CC, Comptia Sec+, etc.
• Advance Security Training/Certification is a plus such as CEH, CISSP, CISM, ISC2 SCCP, etc.