Security Operations Engineer

Private Advertiser; Philippines; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Private Advertiser in Makati is seeking a Security Operations Engineer to strengthen security operations across the enterprise. You will work with security technologies, investigate and respond to events, improve controls, and partner with IT and Infrastructure to reduce risk and strengthen our overall security posture.

This is a night shift, onsite role in Makati. You will develop detection use cases across SIEM/EDR, investigate alerts, coordinate remediation, and support incident response

Qualifications

• 5+ years in cybersecurity or security operations.
• Hands-on SIEM and EDR experience.
• Experience with AWS and Azure environments.
• Investigating incidents and supporting containment/remediation.
• Knowledge of vulnerability management and risk assessments.
• Windows/AD/identity and network security knowledge.
• Familiarity with DLP and enterprise controls.
• Strong analytical and communication skills.

Responsibilities

• Develop, optimize, and maintain security detection use cases across SIEM, EDR, and email security platforms.
• Investigate alerts and coordinate response and containment with IT and Infrastructure teams.
• Work with SIEM and EDR platforms to improve threat detection and response.
• Support security operations across AWS and Azure Cloud environments.
• Identify and prioritize vulnerabilities and drive remediation.
• Review and strengthen security configurations across endpoints, systems, identity, and networks.
• Participate in security risk assessments for new technologies, applications, and projects.
• Support incident response exercises, investigations, and continuous improvement initiatives.
• Partner with IT, Infrastructure, Application, and Compliance teams to address security risks.
• Help maintain security documentation, metrics, and audit readiness.

Skills

Cybersecurity experience

Analytical skills

Communication skills

Incident response

SIEM & EDR

Cloud security

Tools

SIEM

EDR

AWS

Azure

Job description

About the role

We're looking for a Security Operations Engineer to join our team and help strengthen the organization's security operations across our enterprise environment. In this role, you'll work with security technologies, investigate and respond to security events, improve security controls, and partner with IT and Infrastructure teams to reduce risk and strengthen our overall security posture.

This is a night shift, onsite role in Makati.

What You'll Do

• Develop, optimize, and maintain security detection use cases across SIEM, EDR, and email security platforms

• Investigate alerts and coordinate response and containment with IT and Infrastructure teams.

• Work with SIEM and EDR platforms to improve threat detection and response.

• Support security operations across AWS and Azure Cloud environments.

• Identify and prioritize vulnerabilities and help drive remediation.

• Review and strengthen security configurations across endpoints, systems, identity, and networks.

• Participate in security risk assessments for new technologies, applications, and projects.

• Support incident response exercises, investigations, and continuous improvement initiatives.

• Partner with IT, Infrastructure, Application, and Compliance teams to address security risks.

• Help maintain security documentation, metrics, and audit readiness.

What We're Looking For

• At least 5+ years of experience in cybersecurity, security operations, incident response, or a related field.

• Hands-on experience with SIEM and EDR technologies.

• Experience working with security controls in AWS and Azure environments.

• Experience investigating security incidents and supporting containment and remediation.

• Knowledge of vulnerability management and security risk assessment.

• Working knowledge of Windows, Active Directory, identity/access management, and network security.

• Familiarity with DLP and enterprise security controls.

• Strong analytical and problem-solving skills.

• Ability to communicate effectively with both technical and non-technical teams.

Nice to Have

• PowerShell or Python experience

• Security automation experience

• Experience with SOC 2, HITRUST, or other regulated environments

• Security certifications such as Security+, GCIH, GCIA, GCED, CISSP, or CASP+