Lead Security Engineer

Atmail; Filipinas; Presencial; PHP 1 800 000 - 3 200 000; Tempo integral

Resumo da oferta

Atmail is seeking an experienced Security Engineering Lead to own technical security standards and lead a team of security engineers, shaping security practices across cloud platforms used by millions of email users worldwide.

You will translate business risks into practical security requirements, challenge engineering decisions, and balance robust security with operational realities. This role emphasizes hands-on security with leadership responsibilities in a global tech environment.

Qualificações

• Experience leading security engineers or teams.
• Hands-on with ISO 27001 controls and security requirements.
• Experience securing AWS cloud environments.
• Experience managing vulnerability programs for platforms and code.
• Strong technical judgment to assess risks and guide remediation.
• Excellent communication to engage both technical and non-technical stakeholders.

Responsabilidades

• Lead and provide technical direction to security engineers, setting priorities and driving improvements.
• Define and maintain technical security standards aligned with ISO 27001 and risk requirements.
• Collaborate with engineering teams to assess risks and develop practical remediation.
• Oversee vulnerability management across cloud infrastructure, platforms and code.
• Assess findings, rank risks and escalate or remediate as needed.
• Establish security requirements for backup, resilience and disaster recovery.
• Advise on security architecture and modern controls, including emerging risks.
• Support security awareness initiatives and promote a security culture.
• Explain complex security topics clearly to leadership and engineers.

Conhecimentos

Security leadership

Security architecture

Risk assessment

Stakeholder communication

Security engineering basics

Formação académica

CISSP (preferred)

CISM/CCSP/CRISC considered

Ferramentas

AWS security tooling

Vulnerability management

Descrição da oferta de emprego

Lead security engineering. Set the standards. Influence technical decisions. Make a real impact.

We're looking for an experienced Security Engineering Lead to take ownership of technical security standards and provide security leadership within an established, international technology business.

This is an opportunity for a technically strong security professional who enjoys solving complex problems, influencing engineering decisions and ensuring security is embedded into the way technology is designed and operated.

You’ll lead a small team of security engineers, work closely with engineering leadership and play a pivotal role in protecting cloud-based platforms supporting millions of email users worldwide.

The Opportunity

Reporting to the Director, Compliance & Trust, you'll serve as the organisation's technical security expert, translating security obligations and business risks into practical, effective security requirements.

This isn't a role focused solely on compliance or managing security operations. We're looking for someone who understands security engineering at a technical level, can confidently challenge and guide engineering teams, and knows how to balance robust security with operational realities.

What You'll Be Doing

• Lead and provide technical direction to security engineers, establishing priorities and driving security improvements.
• Define and maintain technical security standards aligned with ISO 27001 and organisational risk requirements.
• Partner with engineering teams to assess security risks, develop practical solutions and verify effective remediation.
• Oversee vulnerability management across cloud infrastructure, platforms and application code.
• Assess security findings, determine risk severity and prioritise appropriate remediation or escalation.
• Establish security requirements for backup, resilience and disaster recovery.
• Provide expert advice on security architecture, technical controls and emerging security risks.
• Support security awareness initiatives and help build a strong security culture.
• Communicate complex technical security issues clearly to engineering teams, senior leadership and other stakeholders.

To be considered, you must have:

• Strong practical experience in security engineering or a closely related technical security discipline, including experience leading or directing engineers.
• Hands-on experience implementing technical security controls aligned with ISO 27001.
• Demonstrated experience securing AWS cloud environments.
• Experience managing vulnerability programs covering both platform and code-based vulnerabilities.
• Strong technical judgement, with the ability to investigate security issues, understand their impact, prioritise risks and recommend effective solutions.
• Excellent communication and stakeholder engagement skills, including the confidence to influence technical and non-technical audiences.
• A recognised professional security certification, with CISSP strongly preferred. CISM, CCSP or CRISC will also be considered.

Highly regarded:

• PCI-DSS experience.
• Experience securing large-scale SaaS, hosting, email or other internet-facing platforms.
• Exposure to security automation and cloud security tooling.
• Experience working with geographically distributed engineering teams.

Why Consider This Opportunity?

You’ll have the opportunity to shape the technical security direction of a global technology business, with genuine influence over security standards, engineering practices and risk management.

You’ll work alongside experienced technical professionals, lead dedicated security resources and have the autonomy to establish effective security practices without being responsible for implementing every engineering change yourself.

This is an ideal opportunity for a hands-on security engineering professional ready to take greater ownership and leadership responsibility while remaining closely connected to the technology.

If you’re an experienced security engineering professional with strong AWS expertise, hands-on ISO 27001 experience and the confidence to lead technical security initiatives, we’d welcome your application.