IT Security Trainee

Vertiv

Mandaluyong

On-site

PHP 180,000 - 240,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Vertiv, a global leader in critical digital infrastructure, seeks a Security Engineering Trainee in Metro Manila to support detection engineering within Google SecOps and gain hands-on experience in threat detection, SIEM operations, and security automation. This six-month developmental position is designed for recent IT graduates.

You will work with Security Operations and Infrastructure teams to improve detection coverage, alert quality, and alignment with security standards, while learning

Qualifications

0 to 1 year of experience in Information Technology, Information Security, or a related field.
Bachelor’s degree in information technology, computer science, cybersecurity, or a related field is preferred but not required.
Academic coursework, personal projects, or internship experience in cybersecurity, networking, or systems administration is preferred.
Exposure to security concepts through labs, certifications, or capture-the-flag (CTF) activities is a plus.

Responsibilities

Detection Engineering Support: develop and tune detection rules and use cases within Google SecOps using YARA-L.
Assist with creation and maintenance of detection content aligned with threat behaviors and techniques.
Map detection coverage against MITRE ATT&CK and document logic, rationale, and gaps.

Skills

Networking basics

Windows OS

Linux basics

Python scripting

Communication

Education

Bachelor’s degree preferred

Tools

SIEM

YARA-L

Job description

Join a High-Performance Culture That Drives Innovation and Excellence

At Vertiv, we don’t just hire talent—we cultivate leaders who drive innovation and engage teams to push the limits of what’s possible. As a global leader in critical digital infrastructure, we are scaling up to meet the demands of AI, data centers, and next-gen technology—and we need bold, high-performing individuals like YOU to take us to the next level.

Why Vertiv?

High-Performance Culture: We empower you to think big, execute with excellence, and deliver impact. Our performance-driven mindset rewards those who challenge the status quo and drive meaningful change. Over 50 CEO Awards are given annually to recognize top talent moving the needle forward.
Leadership Without Limits: Leadership at Vertiv goes beyond just titles—it’s about accountability, trust, and ownership. Our leaders engage and drive with collaboration, innovation, and customer-centric thinking, setting the foundation for an action-focused culture.
Limitless Growth & Learning: We believe in continuous development. Whether through rotational programs or high-impact projects, you’ll have the opportunity to expand your expertise and grow your career.
A Place for Everyone: Our commitment to inclusion ensures that all employee’s unique strengths and perspectives are valued. Your voice matters, your growth is prioritized, and your success is celebrated.

Position Summary:

The Security Engineering Trainee is responsible for supporting the design, development, and maintenance of security detection and response capabilities across the organization's security platforms, with a primary focus on detection engineering within Google Security Operations (SecOps).

This role is a six-month developmental position designed for recent IT graduates to gain hands-on experience in security operations engineering. The trainee will work alongside experienced engineers to build foundational skills in threat detection, SIEM operations, and security automation. The Security Engineering Trainee collaborates with Security Operations, Infrastructure, and cross-functional teams to support the organization's detection coverage, improve alert quality, and contribute to operational improvements aligned with security standards.

Job Responsibilities:

Detection Engineering Support
- Support thedevelopment, testing, and tuning of detection rules and use cases within Google SecOps using YARA-L.
- Assist with the creation and maintenance of detection content aligned with known threat behaviors and attack techniques.
- Contribute to the mapping of detection coverage against frameworks such as MITRE ATT&CK.
- Support the documentation of detection logic, rule rationale, and coverage gaps.
- Assist with log source validation to confirm expected telemetry is available for detection use cases.
- Participate in detection review processes and contribute feedback on rule performance and alert fidelity.
Detection Quality and Iterative Improvement
- Engage with SOC analysts to understand challenges they face with existing detection rules and alert logic.
- Gather and document feedback from the SOC regarding false positives, detection gaps, noisy rules, and workflow friction.
- Translate SOC-identified issues into actionable improvement suggestions and bring them to the engineering team for review.
- Support iterative tuning of detection content based on operational feedback, false positive analysis, and coverage assessments.
- Assist with validating that implemented fixes resolve the originally reported challenges.
- Identify repetitive tasks suitable for scripting or orchestration and contribute to automation opportunities.
- Propose incremental improvements to engineering workflows, tooling, and documentation based on observations during day-to-day work.
- Develop and maintain documentation for processes, configurations, and procedures as they are encountered and learned.

Qualifications:

Experience:
- 0 to 1 year of experience in Information Technology, Information Security, or a related field.
- Bachelor’s degree in information technology, computer science, cybersecurity, or a related field is preferred but not required.
- Academic coursework, personal projects, or internship experience in cybersecurity, networking, or systems administration is preferred.
- Exposure to security concepts through labs, certifications, or capture-the-flag (CTF) activities is a plus.
Technical Skills:
- Foundational understanding of networking concepts (TCP/IP, DNS, HTTP, firewalls).
- Basic familiarity with operating system fundamentals (Windows, Linux).
- Awareness of common security threats, attack techniques, and defensive principles.
- Willingness and ability to learn YARA-L, log analysis, and SIEM platform operations.
- Basic scripting or programming exposure (Python, Bash, or PowerShell) is a plus.
- Familiarity with security frameworks such as MITRE ATT&CK is a plus.
Professional Skills
- Strong willingness to learn and accept feedback in a fast-paced environment.
- Ability to follow documented procedures and elevate appropriately when encountering unfamiliar situations.
- Attention to detail when reviewing logs, alerts, and security data.
- Clear written and verbal communication skills for documenting work and collaborating with the team.
  - Ability to manage time effectively and meet deadlines in a fast-paced operational environment.
- Comfortable working in a collaborative team setting with engineers of varying experience levels.
Certifications (preferred, not required)
- CompTIA Security+, Network+, or CySA+
- Google Cybersecurity Certificate
- Any GIAC or vendor-specific security certification