Security Operations Engineer – Cloud & Crypto FinTech

PDAX Access Channels. This limited; Pasig; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

PDAX, a Philippine crypto exchange, seeks a security engineer to join our growing team in Manila. You will handle monitoring, alert triage, and assist in incident response while coordinating with MSOC partners.

You will help build detections, perform threat hunting, and contribute to automation across cloud and on‑prem environments. This role emphasizes drills and readiness for security incidents.

Qualifications

• Typically 2–4 years in security engineering, cloud security, or detection and response.
• AWS security: investigate CloudTrail events, GuardDuty, Security Hub and Inspector findings, and WAF logs.
• Incident response and threat hunting: investigate phishing, endpoint compromise, credential theft, and suspicious cloud activity.
• Detection engineering: build and tune SIEM/EDR detections, reduce false positives.
• Security automation and scripting: Python, JavaScript/TypeScript, or similar to automate investigations.
• Vulnerability management: assess exploitability and coordinate remediation across dependencies.
• Identity and application security: least privilege, SSO, MFA, secrets management, API security.
• Ownership and communication: explain findings and actions clearly to tech teams and management.

Responsibilities

• Monitor security alerts from SIEM, EDR/XDR, and cloud security tools.
• Perform initial alert triage and escalate to senior team members.
• Validate alerts from the MSOC provider.
• Assist senior engineers during security incidents (phishing, malware, account compromise).
• Collect logs, indicators of compromise (IOCs), and basic forensic data.
• Follow incident response playbooks and document actions taken.
• Support coordination with the MSOC provider; ensure tickets and escalations follow defined channels.
• Help track incident timelines, handoffs, and follow-ups between MSOC and internal teams.
• Maintain security monitoring coverage and log onboarding.
• Tune alerts to reduce false positives and verify critical systems are monitored.
• Assist in internal vulnerability assessments and basic attack simulations.
• Track findings from internal and external VAPT exercises; support remediation tracking.
• Document incident learnings, alerts, and recurring issues; participate in tabletop exercises.

Skills

AWS security

Incident response

Threat hunting

Detection engineering

Security automation

Vulnerability management

Identity and application security

Ownership and communication

Scripting

Tools

CrowdStrike

Wazuh

Trend Micro

JumpCloud

Job description

PDAX, a Philippine crypto exchange, seeks a security engineer to join our growing team in Manila. You will handle monitoring, alert triage, and assist in incident response while coordinating with MSOC partners.

You will help build detections, perform threat hunting, and contribute to automation across cloud and on‑prem environments. This role emphasizes drills and readiness for security incidents.