Security Engineer - GRC

Thrive; Mabalacat; On-site; PHP 600,000 - 900,000; Full time

Job summary

Thrive, a rapidly growing technology solutions provider, is seeking a Security Engineer to join its Infosec GRC team in the Philippines. You will lead security awareness training campaigns, run phishing tests, and troubleshoot platform issues, while aligning with client compliance needs and industry best practices.

The role emphasizes continuous learning and growth in cybersecurity, with collaboration across teams to ensure secure configurations, reliable reporting, and proactive risk reduction.

Qualifications

• Strong understanding of networking concepts and operating systems.
• Knowledge of cybersecurity threats and risk management.
• Ability to communicate technical security concepts to non-technical audiences.
• Strong interest in cybersecurity and willingness to learn.
• Experience with ISO27001, CMMC or similar frameworks is a plus.
• 3–5 years of information security or related role.

Responsibilities

• Manage security awareness training campaigns.
• Manage phishing tests.
• Troubleshoot phishing email delivery/interaction issues.
• Troubleshoot security tool performance issues, integrations and other platform problems.
• Create and maintain documentation for security processes, procedures, and technologies.
• Setup and generate IT audit reports.
• Audit client setups, ensuring accurate configuration is maintained.
• Stay current on security threats, attack techniques, and best practices.

Skills

Data analysis

Networking concepts

Security awareness

Communication skills

Troubleshooting

Security best practices

Tools

Active Directory

Entra ID

Email systems

ServiceNow

KnowBe4

Job description

About Us:

Thrive is a rapidly growing technology solutions provider focusing upon Cloud, Cyber Security, Networking, Disaster Recovery and Managed Services. Our corporate culture, engineering talent, customer-centric approach, and focus upon “next generation” services help us stand out amongst our peers. Thrive is on the look-out for individuals who don’t view their weekdays spent at “a job”, but rather look to develop valuable skills that ignite their passion and lead to a CAREER. If you’re attracted to a “work hard, play hard” environment, seeking the guidance, training and experience necessary to build a lucrative career, then welcome to THRIVE!!

Position Overview:

We are seeking a Security Engineer to join our Infosec GRC team. This role is responsible for the management and delivery of security awareness training and phishing campaigns, generating reports from our IT auditing platform, and troubleshooting of these platforms.

The Security Engineer will work closely with clients to ensure our services meet their compliance requirements. This is an ideal opportunity for someone who is committed to continuous learning, transitioning from IT, and is interested in a cybersecurity career.

Primary Responsibilities:

• Management and execution of security awareness training campaigns
• Management and execution of phishing tests
• Troubleshoot phishing email delivery/interaction issues
• Troubleshoot security tool performance issues, integrations and other platform problems
• Create and maintain documentation for security processes, procedures, and technologies
• Setup and generate IT audit reports
• Audit client setups, ensuring accurate configuration is maintained
• Stay current on security threats, attack techniques, and best practices through training and research
• Perform other duties as required.

Qualifications:

• Strong understanding of networking concepts, operating systems
• Knowledge of cybersecurity threats and risk management, especially human risk management
• Ability to communicate technical security concepts to non-technical audiences
• Strong interest in cybersecurity
• Demonstrates sound security practices and attention to detail
• Willingness to learn and grow

Required Skills:

• Ability to analyze data from multiple sources and use findings to support troubleshooting and decision-making
• Foundational understanding of Active Directory, Entra ID, and email systems, including common configuration and troubleshooting tasks
• Excellent written and verbal communication skills
• Customer service skills
• Knowledge of compliance frameworks such as ISO27001, CMMC, etc.
• Foundational networking knowledge, including protocols such asDNS, HTTP/S, SMTP

Preferred Skills:

• Prior experience with ServiceNow and KnowBe4
• 3-5 Years of experience in information security or a related technical role.
• Relevant coursework, certifications or lab experience.
• One or more of the following or relevant certifications: Security+, SACP, CISSP, CISA, CISM