Security Operations Engineer

Qi Group; Pasig; On-site; PHP 700,000 - 1,000,000; Full time

Job summary

Qi Group is seeking a cybersecurity professional in Pasig for incident response, security automation, and cloud security. You’ll investigate threats, respond to incidents, and build automated workflows using Microsoft Defender, Azure Sentinel, Azure Functions, and Logic Apps.

The role requires 2–5 years in Cybersecurity with hands-on Microsoft security experience, strong analytical skills, and the ability to work with regional/global teams.

Qualifications

• 2–5 years of cybersecurity experience in SOC, IR, threat hunting, or security operations.
• Hands-on experience with Microsoft security technologies and cloud environments.
• Strong analytical and troubleshooting skills.
• Experience automating security processes via scripting or workflow tools.
• Azure certifications with at least one security-focused credential preferred.
• Ability to work independently and collaborate with regional/global teams.

Responsibilities

• Investigate and respond to security alerts and incidents using Defender and Azure Sentinel.
• Perform threat hunting and identify indicators across the environment.
• Develop and enhance security automation, playbooks, and response workflows.
• Build automation solutions using Azure Functions, Logic Apps, scripting, and AI-enabled tools.
• Research emerging threats and security trends.
• Collaborate with IT teams to implement security best practices and Zero Trust.
• Support continuous improvement to strengthen the organisation's security posture.

Skills

Cybersecurity

SOC

Incident Response

Threat Hunting

Security Operations

Microsoft Security

Scripting

Automation

Azure Certifications

Azure Cloud

Tools

PowerShell

Azure Functions

Logic Apps

Job description

We're looking for a cybersecurity professional who is passionate about incident response, security automation, and cloud security. If you enjoy investigating threats, building automated solutions, and improving security posture through Microsoft technologies, we'd love to speak with you.

What You’ll Be Doing

• Investigate and respond to security alerts and incidents through Microsoft Defender and Azure Sentinel.
• Perform threat hunting and identify indicators of compromise across the environment.
• Develop and enhance security automation, playbooks, and response workflows.
• Build automation solutions using Azure Functions, Logic Apps, scripting, and AI-enabled tools.
• Research emerging threats, vulnerabilities, and security trends.
• Collaborate with IT teams to implement security best practices and Zero Trust principles.
• Support continuous improvement initiatives to strengthen the organisation's security posture.

What We’re Looking For

• Possess 2–5 years of experience in Cybersecurity, SOC, Incident Response, Threat Hunting, or Security Operations.
• Hands‑on experience with Microsoft security technologies and cloud environments.
• Strong analytical and troubleshooting skills.
• Experience automating security processes through scripting or workflow automation tools.
• Azure certifications, with at least one security‑focused certification preferred.
• Ability to work independently while collaborating with regional and global teams.

Key Requirements

• Experience in Security Incident Response and Investigation
• Experience with Microsoft 365 Security Suite (Microsoft Defender, O365 Security, Intune, MCAS, etc.)
• Scripting and Automation experience (PowerShell, Azure Functions, Logic Apps, or similar)
• Azure certifications (Security certifications highly preferred)