Security Engineer - Remediation

Thrive; Quezon City; On-site; PHP 600,000 - 900,000; Full time

Job summary

Thrive, a technology solutions provider in the Philippines, seeks a Security Engineer for Remediation to address vulnerabilities identified through Vulnerability Management and Penetration Testing services. The role focuses on remediation for gaps not covered by Thrive’s existing services and for assets not fully managed by Thrive.

You will collaborate with the Infosec Ops Team to assess threats, document remediation actions, and communicate outcomes to clients while staying updated on evolving

Qualifications

• Solid understanding of cybersecurity threats, vulnerability management, and remediation techniques.
• Ability to analyze complex security issues and develop effective remediation strategies.
• Excellent written and verbal communication skills, capable of articulating technical concepts to non-technical audiences.
• Proven ability to work effectively within a team and collaborate with stakeholders to achieve security goals.
• Demonstrates a strong passion for cybersecurity and a commitment to maintaining high security standards.

Responsibilities

• Collaborate with the Infosec Ops Team to assess vulnerabilities and implement remediation strategies.
• Document and maintain detailed records of remediation efforts and outcomes.
• Provide clear communication to clients regarding remediation activities and results.
• Stay informed about the latest security threats and remediation techniques.
• Ensure remediation efforts align with industry standards and best practices.

Skills

Vulnerability management

Remediation techniques

GPOs & Intune configurations

On-Prem, Cloud, and Hybrid

Network protocols & SSL

Data analysis

Job description

About Us:

Thrive is a rapidly growing technology solutions provider focusing on Cloud, Cyber Security, Networking, Disaster Recovery, and Managed Services. Our corporate culture, engineering talent, customer‑centric approach, and focus on next‑generation services help us stand out amongst our peers. We are committed to developing valuable skills that ignite passion and lead to a fulfilling career. If you're attracted to a \"work hard, play hard\" environment and seek the guidance and training necessary to build a lucrative career, welcome to Thrive!

Position Overview:

Thrive is seeking a skilled Security Engineer for a Remediation role to join our team. This role is dedicated to addressing vulnerabilities and attack vectors identified through Thrive's Vulnerability Management and Pentesting services. The Security Engineer - Remediation will focus on remediation efforts for vulnerabilities not covered under existing Thrive services, such as those not included in patching or on assets that are not fully managed by Thrive.

Primary Responsibilities:

• Collaborate closely with the Infosec Ops Team to thoroughly assess vulnerabilities and attack vectors identified through Thrive's services and implement effective remediation strategies into the existing security framework


• Document and maintain detailed records of remediation efforts, including methods used, outcomes, and any follow‑up actions required


• Provide clear and concise communication to clients regarding remediation efforts and outcomes, ensuring transparency and understanding


• Stay informed about the latest security threats and remediation techniques to maintain Thrive's leading edge in cybersecurity services


• Ensure all remediation efforts align with industry standards and best practices to uphold high security standards

Requirements

Qualifications:

• Solid understanding of cybersecurity threats, vulnerability management, and remediation techniques


• Ability to analyze complex security issues and develop effective remediation strategies


• Excellent written and verbal communication skills, capable of articulating technical concepts to non‑technical audiences


• Proven ability to work effectively within a team and collaborate with stakeholders to achieve security goals


• Demonstrates a strong passion for cybersecurity and a commitment to maintaining high security standards

Required Skills:

• Experience in vulnerability discovery, analysis, and remediation


• Experience in full lifecycle of GPOs and Intune Configurations for system hardening and remediation. Includes scoping, testing, deploying and decommissioning policies.


• Experience with On‑Prem, Cloud, and Hybrid infrastructure environments


• Strong understanding of network protocols, operating systems and management of SSL certificates with a focus on security best practices


• Familiarity with TCP/IP and application layer protocols (e.g., HTTP, SMTP, DNS)


• Ability to analyze large amounts of data from various sources to solve complex problems

Preferred Skills:

• Knowledge of common Windows and Linux/Unix system calls and APIs


• Understanding of Anti‑Virus and malware protection techniques


• Familiarity with programming languages for scripting and automation tasks


• Knowledge of internal file structures for file formats commonly associated with malware (e.g., OLE, RTF, PDF, EXE)


• Certifications such as Net+, Sec+, Cysa+ or equivalent are strongly recommended.


• Full cycle experience call out might be better \"scoping, testing and deploying/decommissioning...\".