Security Engineering Associate — Cloud, IR & Detection

PDAX Access Channels. This limited; Pasig; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

PDAX, a Philippine digital assets platform, seeks a security engineer to strengthen our security monitoring, incident response, and threat-hunting capabilities. You will work with SIEM/EDR, cloud security tools, and MSOC to triage alerts, investigate incidents, and support defenses across our fintech infrastructure.

The role emphasizes collaboration, documentation, and readiness, including tabletop exercises, playbook updates, and vulnerability assessments.

Qualifications

• 2–4 years in security engineering, cloud security, or detection and response.
• Experience investigating CloudTrail events, GuardDuty, Security Hub and Inspector findings, and WAF logs.
• Incident response and threat hunting across systems and cloud environments.
• Detection engineering: tune SIEM/EDR detections and reduce false positives.
• Security automation: Python, JavaScript/TypeScript or similar for API integrations.
• Identity security: least privilege, MFA, IAM, secrets management, API security.
• Strong communication to explain findings to technical teams and management.

Responsibilities

• Monitor security alerts from SIEM, EDR, and cloud security tools.
• Assist senior engineers during security incidents (phishing, malware, account compromise).
• Coordinate with MSOC, track alerts, tickets, and escalations.
• Maintain security monitoring coverage and log onboarding; tune alerts.
• Assist in internal vulnerability assessments and basic attack simulations.
• Document incident learnings, playbooks, and runbooks; participate in tabletop drills.

Skills

Security ownership/investigations

Incident response

Detection engineering

Security automation/scripting

Communication with stakeholders

Tools

CrowdStrike

Wazuh

Trend Micro

JumpCloud

Job description

PDAX, a Philippine digital assets platform, seeks a security engineer to strengthen our security monitoring, incident response, and threat-hunting capabilities. You will work with SIEM/EDR, cloud security tools, and MSOC to triage alerts, investigate incidents, and support defenses across our fintech infrastructure.

The role emphasizes collaboration, documentation, and readiness, including tabletop exercises, playbook updates, and vulnerability assessments.