Lead Cybersecurity Engineer & Threat Hunter

GoTyme PH (Philippines); Quezon City; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

GoTyme PH, a joint venture between the Gokongwei Group and Tyme, seeks a Senior Cyber Security Engineer to lead detection, incident response, and threat hunting across cloud and endpoint environments. You will mentor teams, shape security controls, and partner with technology and business units to strengthen the organization's security posture.

You will drive investigations, improve detection logic, and contribute to zero-trust initiatives with AWS and Azure tooling, SIEM/SOAR, and cloud-native

Qualifications

• 7–10+ years in cybersecurity engineering, SOC, or security operations roles.
• Experience leading complex security investigations and IR.
• Deep expertise with AWS security services and Azure tooling.
• Hands-on with EDR/XDR platforms and network concepts.
• Mentoring or leading other security practitioners.

Responsibilities

• Lead advanced monitoring and analysis of security events across AWS, Azure, and endpoints.
• Design and tune detections using CloudTrail, GuardDuty, Security Hub, Sentinel, Defender.
• Conduct forensic analyses of hosts, cloud, and logs; produce root-cause reports.
• Mentor junior engineers and represent IR in tabletop exercises and playbooks.
• Coordinate threat hunting and incident response across teams and platforms.

Skills

AWS security

Azure security

SIEM & SOAR

Threat hunting

Incident response

Python

Zero trust

IAM

EDR/XDR

Cloud security

Mentoring

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

CloudTrail

GuardDuty

Azure Sentinel

Defender

Security Hub

SIEM

SOAR

Job description

GoTyme PH, a joint venture between the Gokongwei Group and Tyme, seeks a Senior Cyber Security Engineer to lead detection, incident response, and threat hunting across cloud and endpoint environments. You will mentor teams, shape security controls, and partner with technology and business units to strengthen the organization's security posture.

You will drive investigations, improve detection logic, and contribute to zero-trust initiatives with AWS and Azure tooling, SIEM/SOAR, and cloud-native