Security Engineer (Microsoft Azure)

Comrise; Taguig; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Comrise is seeking a hands-on Security Engineer to lead vulnerability remediation across a multi-subscription Azure environment. You will address infrastructure, application, platform, and identity findings, tracking remediation against timelines and supporting audits.

The role emphasizes automation, repeatable processes, and integration of security into CI/CD pipelines. You will contribute to broader security initiatives and reporting on risk trends from multiple sources.

Qualifications

• Experience with cloud security in Azure and CSPM/CNAPP tooling.
• Proficient in vulnerability remediation and patch management.
• Familiar with DevSecOps and CI/CD integration.
• Experience using vulnerability scanners such as Nessus and Qualys.

Responsibilities

• Remediate vulnerabilities across multiple Azure subscriptions.
• Support vulnerability management and patching across OS and infrastructure.
• Collaborate with development teams to remediate findings from DAST, OSS, and pentest reports.
• Track remediation timelines and report risk trends to stakeholders.

Skills

PaaS/IaaS security

Networking

Identity management

Storage security

Systems administration

Patch management

Vulnerability remediation

DevSecOps

Tools

Nessus

Qualys

Invicti

Wiz

Azure DevOps

Job description

We are seeking a hands-on Security Engineer to lead vulnerability remediation across a multi-subscription Azure environment. The role spans infrastructure, application, platform, and identity related findings, including access reviews and exposed credentials. The person will track remediation against defined timelines, support audits and compliance reviews, and report on risk trends from internal, external, and vendor sources. Automation and repeatable processes are central to the work, and the role requires enough technical depth to build and maintain that automation. The person will also support broader security initiatives as priorities shift.

Key Responsibilities

Cloud & Infrastructure Security Remediation

• Remediate vulnerabilities across multiple Azure subscriptions
• Address findings from:
• Investigate and resolve infrastructure-level security risks across:
• Storage and supporting services

Vulnerability Management & Patching

• Assist in remediation of OS and infrastructure vulnerabilities, including:
• OS patching and hardening (Windows / Linux)
• VM OS updates and lifecycle management
• Identify and address end-of-life (EOL) systems and dependencies
• Patch management
• Vulnerability tracking and reporting

Application Security Remediation

• Partner with development teams to remediate:
• DAST findings (e.g., Invicti)
• Open-source library vulnerabilities
• Penetration Testing Findings
• Support secure configuration of application environments
• Integrate security into Azure DevOps CI/CD pipelines where applicable
• Improve overall DevSecOps maturity

Security Program Support (New)

• Support assigned security program initiatives as directed by leadership
• Assist with security review documentation for client and audit requests
• Contribute to remediation tracking and reporting across security workstreams

Observability & Reporting

• Analyze and prioritize vulnerabilities based on:
• Severity (CVSS)
• Business impact
• Provide regular updates on:
• Remediation progress
• Outstanding issues

Required Skills & Experience

Core Technical Skills

• PaaS and IaaS resources, networking, identity, storage
• Hands-on expertise with:
• Systems administration and patching (Windows, Linux, etc.)
• Infrastructure vulnerability remediation
• Familiarity with:
• Wiz or similar CSPM/CNAPP tools
• Vulnerability scanners (Nessus, Qualys, etc.)

Security & DevOps

• Experience with:
• Dependency and open-source vulnerability remediation
• Understanding of:
• Cloud security best practices

Nice to Have

• Experience with:
• Infrastructure as Code (Terraform, ARM, Bicep, etc.)
• Penetration Testing
• Familiarity with: