Security Operations Engineer: Threat Detection & Incident Response

Innodata Inc.; Metro Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Innodata Inc. seeks an Information Security Engineer to protect information assets through proactive monitoring, incident response, vulnerability management, security hardening, and implementation of cybersecurity controls.

You will own SIEM platforms, investigate threats, perform root-cause analysis, and coordinate remediation with IT and infrastructure teams, while maintaining endpoint protection across the environment.

Qualifications

• Bachelor’s degree in IT, CS, cybersecurity, or related field.
• 5+ years of hands-on SecOps/Cyber Engineering or security infrastructure.
• Hands-on SIEM experience (Splunk, QRadar, MS Sentinel).
• Solid knowledge of endpoint security tools (EDR, antivirus, DLP).
• Working knowledge of vulnerability management & remediation.
• Familiarity with firewalls, IDS/IPS, and IAM solutions.

Responsibilities

• Monitor, detect, and respond to security threats across endpoints, networks, and enterprise systems.
• Manage and optimize SIEM platforms, including rule tuning, alert triage, and log analysis.
• Investigate security incidents, perform root cause analysis, and document findings.
• Administrate and maintain endpoint security solutions to ensure protection.
• Identify, assess, and remediate vulnerabilities with IT/infrastructure teams.
• Support deployment and maintenance of enterprise security technologies.
• Participate in incident response activities including containment, eradication, and recovery.

Skills

Incident response

Vulnerability management

Log analysis

Threat detection

Endpoint security

Security architecture

Education

Bachelor’s degree in IT, Computer Science, Cybersecurity, or related field

Tools

Splunk

QRadar

Microsoft Sentinel

EDR

DLP

Firewalls

IDS/IPS

Identity/Access Management

Job description

Innodata Inc. seeks an Information Security Engineer to protect information assets through proactive monitoring, incident response, vulnerability management, security hardening, and implementation of cybersecurity controls.

You will own SIEM platforms, investigate threats, perform root-cause analysis, and coordinate remediation with IT and infrastructure teams, while maintaining endpoint protection across the environment.