Security Engineer

Azeus Systems Limited; Metro Manila; In loco; PHP 800.000 - 1.500.000; Tempo pieno

Descrizione del lavoro

Azeus Systems Limited is seeking a cybersecurity specialist with 3–5 years of experience to strengthen security across development and operations in Manila. You will engage in blue-team defense and red-team testing, perform vulnerability management, and support certification preparation.

The role requires hands-on skills in Burp Suite, OWASP ZAP, Metasploit, and SIEM, plus programming in Java, JavaScript, and C/C++. AWS and scripting experience are preferred.

Competenze

• Bachelor’s degree in a relevant field (CS/CE/Cybersecurity)
• 3–5 years in cybersecurity with hands-on security engineering
• Strong understanding of cybersecurity principles, standards and protocols (OWASP Top 10, SANS Controls)
• Experience with application security tools: Burp Suite, OWASP ZAP, Metasploit, SonarQube
• Proficiency in Java, JavaScript, C/C++, and scripting (bash, PowerShell)
• Cloud knowledge (AWS) and SIEM technologies
• Good analytical skills and ownership mindset
• Certifications such as CISA/CISM/CISSP are a plus

Mansioni

• Collaborate with Blue Team to implement security best practices across SDLC
• Automate vulnerability detection workflows within the software development lifecycle
• Review risks and patches of software components used in applications
• Facilitate threat modelling as part of the SDLC
• Support security awareness training and control implementations for certifications (ISO 27001, SOC 2)
• Engage in Red Team activities: perform penetration testing of Web and Mobile apps, manage vulnerability lifecycle, monitor security risks, investigate incidents
• Liaise with users on security inquiries during Pre-sales and Support

Conoscenze

Java

JavaScript

C/C++

Bash

PowerShell

AWS

SIEM

OWASP Top 10

SANS Critical Security Controls

Formazione

Bachelor's Degree in Computer Science

Bachelor's Degree in Computer Engineering

Bachelor's Degree in Cybersecurity

Strumenti

Burp Suite

OWASP ZAP

Metasploit

SonarQube

Ghidra

ID A

Descrizione del lavoro

Azeus is a leading IT services provider with more than 30 years of experience in successfully delivering IT solutions. We have clients in Europe, Asia Pacific, America, Africa, and Middle East. Throughout the years, our sound model of integrated operations has enabled us to build an extensive track record of developing large and complex IT systems for the public and private sectors. Azeus has delivered 250 IT projects to over 60 government departments and public authorities in Asia and Europe. The software products we developed have also achieved an international customer base spanning over 100 countries in both the public and commercial sectors.

Duties & Responsibilities:

Conduct engagement with the Blue Team for the following:

• Work with engineering and devops teams to implement security best practices
• Implement and improve workflows to automate vulnerability detection as part of the software development lifecycle.
• Review risks and patches of software components used in the applications.
• Facilitate threat modelling as part of the software development lifecycle.
• Help in security awareness training.
• Help in implementing the needed controls for different certification bodies such as ISO 27001 and SOC Type 2

Involve in Red Team activities:

• Perform penetration testing of Web and Mobile (iOS, Android, Windows and Mac) applications.
• Own the vulnerability management lifecycle from identification, remediation to reporting.
• Active monitoring and detection of operational security risks in the organization.
• Conduct technical investigations on security incidents and tools.
• Liase directly with users on security enquiries and concerns during Pre-sales and Support

Education

Bachelor’s Degree in Computer Science, Computer Engineering, Cybersecurity or related field

Experience

• At least 3-5 years of experience in cyber security.
• Solid understanding of cybersecurity principles, standards and protocols such as OWASP Top 10 and SANS Critical Security Controls atleast
• 2 years of experience with application security tools as Burpsuite, OWASP ZAP, Metasploit, Sonarqube (experience with Ghidra or IDA is a plus)
• atleast 2 years Experience with programming languages such as Java, Javascript, C/C++
• Experience with scripting languages such as bash or Powershell
• Experience and knowledge of cloud solutions and architectures such as AWS
• Experience and knowledge of Security information and event management (SIEM) technologies
• Good analytical skills
• Strong sense of ownership

Skills/Certifications/Languages (nice to have)

• Technical and industry certifications are a plus such as CISA, CISM, CISSP