Security Platform Engineer (SIEM/SOAR, EDR, Google Sec Ops)

Vertiv

Mandaluyong

On-site

PHP 1,000,000 - 1,800,000

Full time

9 days ago

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Vertiv is seeking a Senior Security Engineer in Metro Manila to lead the implementation, operation, and continuous improvement of security platforms protecting endpoints, data, cloud infrastructure, and networks. You will work with Security Operations, GRC, and IT teams to ensure effective, well-documented security controls and risk-aligned objectives.

The role requires 5+ years of enterprise security experience, strong incident triage, and expertise in ITIL-aligned change management.

Qualifications

5+ years of experience in security engineering or equivalent.
Experience administering and operating enterprise security platforms in a corporate environment.
Familiarity with incident triage, escalation, and root cause analysis.
Understanding of attack vectors and defense-in-depth principles.
Knowledge of ITIL-aligned change and incident management processes.

Responsibilities

Administer, configure, and maintain security platforms across tools portfolio (EDR, vuln mgmt, cloud security, SIEM/SOAR).
Maintain platform health, troubleshoot issues, and coordinate with vendors.
Develop and maintain detection logic, policies, and rules.
Tune alerting to reduce noise and improve signal quality.
Validate, test, and deploy policy changes through change control.

Skills

Security engineering

Incident response

Documentation

ITIL processes

Change management

Communication

Security operations

Tools

PowerShell

Python

KQL

YARA-L

ServiceNow

SIEM/SOAR

Job description

Join a High-Performance Culture That Drives Innovation and Excellence

At Vertiv, we don’t just hire talent—we cultivate leaders who drive innovation and engage teams to push the limits of what’s possible. As a global leader in critical digital infrastructure, we are scaling up to meet the demands of AI, data centers, and next-gen technology—and we need bold, high-performing individuals like YOU to take us to the next level.

Why Vertiv?

High-Performance Culture: We empower you to think big, execute with excellence, and deliver impact. Our performance-driven mindset rewards those who challenge the status quo and drive meaningful change. Over 50 CEO Awards are given annually to recognize top talent moving the needle forward.
Leadership Without Limits: Leadership at Vertiv goes beyond just titles—it’s about accountability, trust, and ownership. Our leaders engage and drive with collaboration, innovation, and customer-centric thinking, setting the foundation for an action-focused culture.
Limitless Growth & Learning: We believe in continuous development. Whether through rotational programs or high-impact projects, you’ll have the opportunity to expand your expertise and grow your career.
A Place for Everyone:Our commitment to inclusion ensures that all employee’s unique strengths and perspectives are valued. Your voice matters, your growth is prioritized, and your success is celebrated.

POSITION SUMMARY:

The Security Engineer is responsible for the implementation, operation, and continuous improvement of security platforms that protect the organization's endpoints, data, cloud infrastructure, and network. This role operates within the Security Engineering team and serves as an escalation point for security-related incidents, policy exceptions, and technical investigations. The Security Engineer works closely with Security Operations, Governance Risk and Compliance, and broader IT teams to ensure security platforms are effective, well-documented, and aligned with organizational risk objectives.

KEY RESPONSIBILITIES

Security Platform Administration

Administer, configure, and maintain security platforms across the team's portfolio (endpoint detection and response, vulnerability management, cloud security, SIEM/SOAR)
Maintain platform health and configuration, troubleshoot operational issues, and coordinate with vendors on break/fix and feature enablement
Develop and maintain detection logic, policies, and rules within assigned platforms
Tune alerting and detection to reduce noise, improve signal quality, and minimize false positives
Validate, test, and deploy policy changes through established change control processes

Incident Support and Escalation

Serve as a technical escalation point for security incidents, investigations, and platform-related issues.
Perform root cause analysis using logs, telemetry, and diagnostic platforms.
Partner with Security Operations and IT teams to improve detection quality, response processes, and investigative capabilities.
Provide guidance, procedures, and technical expertise to support teams and stakeholders.

Documentation, Projects and Collaboration

Create and maintain technical documentation, runbooks, standards, and knowledge articles.
Implement security projects and enhancements as defined by the architecture team, providing operational feedback and recommendations to inform future design decisions.
Collaborate with Security, IT, Infrastructure, Application, and Governance teams to support business and security objectives.
Contribute to knowledge-sharing, cross-training, and continuous improvement initiatives across the team.

QUALIFICATIONS

Required

5+ years of experience.
Experience administering and operating enterprise security platforms in a corporate environment.
Familiarity with security operations workflows including incident triage, escalation, and root cause analysis.
Understanding of common attack vectors, detection methodologies, and defense-in-depth principles.
Experience working within ITIL-aligned processes (change management, incident management, problem management).
Ability to clearly document technical procedures and communicate findings to both technical and non-technical audiences.
Experience working in a ticketing system (ServiceNow or equivalent) for incident tracking and change control.

Preferred

Experience with one or more of the team's core technology domains (endpoint security, vulnerability management, cloud security, SIEM/SOAR).
Familiarity with scripting or automation for operational efficiency (PowerShell, Python, KQL, YARA-L, or similar).
Experience operating in cloud environments (Azure, AWS, or GCP).
Understanding of regulatory and compliance frameworks relevant to the organization.

Optional Certifications by Specialization

General Security: CISSP, Security+, GSEC, SSCP, or equivalent
Cloud Security: AZ-500, AWS Security Specialty, CCSP, or equivalent
Endpoint Security: Relevant vendor certifications (Microsoft, CrowdStrike, or similar EDR platforms)
Detection Engineering: GCIA, GCIH, or equivalent

The successful candidate will embrace Vertiv’s Core Principals & Behaviors to help execute our Strategic Priorities.

OUR CORE PRINCIPALS:

Safety. Integrity.Respect. Teamwork. Diversity & Inclusion.

OUR STRATEGIC PRIORITIES