Security Systems Engineer

Fortis Technologies Corporation; Pasig; On-site; PHP 600,000 - 900,000; Full time

Job summary

Fortis Technologies Corporation in the Philippines seeks a Security Systems Engineer (Entry to Mid-Level) to strengthen system security across Linux, Windows, and cloud workloads.

You will work on IAM, network security, virtualization, automation, and incident response, collaborating with SOC and IT teams to monitor, detect, and remediate threats.

Candidates with 2–4 years of hands-on security and infrastructure experience, plus relevant certifications, are encouraged to apply.

Qualifications

• 2–4 years in a hybrid role spanning system engineering/administration and security analysis, SOC operations, or infrastructure security.
• Bachelor’s degree in Information Technology, Computer Science, or equivalent practical experience and relevant technical training.
• Experience administering, securing, and hardening enterprise Linux (RHEL, Ubuntu, Oracle) and Windows Server environments per CIS/NIST guidelines.
• Hands-on experience with Active Directory, Microsoft Entra ID (formerly Azure AD), GPOs, IAM policies, and RBAC.
• Strong networking knowledge: TCP/IP, DNS, DHCP, TLS/SSL, IPsec; routing/switching; enterprise firewall/VPN.
• Cloud/Virtualization: OCI/AWS/Azure/GCP and VMware/Hyper-V/KVM/Proxmox.
• Automation: PowerShell, Bash, Python for admin and security tasks.
• Experience with SIEM/XDR platforms (Splunk, Sentinel, Elastic, Wazuh) for log ingestion and alert triage.
• EDR/XDR: CrowdStrike Falcon, SentinelOne, Defender for Endpoint.
• Vulnerability management: Nessus, Qualys, Rapid7; CVSS/EPSS analysis.
• Incident response: triage, containment, forensic log collection, root-cause analysis.
• Certifications such as Security+/Network+/Linux+, Azure/AWS, or similar are a plus.

Skills

Linux system administration

Windows Server administration

Active Directory / Entra ID

RBAC & GPO

Networking (TCP/IP, DNS, DHCP)

TLS/SSL, VPN

Cloud platforms (OCI/AWS/Azure/GCP)

Virtualization (VMware/Hyper-V/KVM/Pro

Automation scripting (PowerShell/Bash,

SIEM/XDR (Splunk/Sentinel/Elastic/Wazh

EDR/XDR agents (CrowdStrike/SentinelOn

Vulnerability management (Nessus/Qualy

Incident response & forensics

Education

Bachelor’s degree in Information Technology, Computer Science, or equivalent practical experience

Tools

OCI

AWS

Azure

GCP

VMware

Hyper-V

KVM

Proxmox

Job description

Security Systems Engineer (Entry to Mid-Level)

Required Qualifications Experience & Education:

• Experience: 2–4 years of hands-on experience in a hybrid role spanning system engineering/administration and security analysis, SOC operations, or infrastructure security.
• Education: Bachelor’s degree in Information Technology, Computer Science, or equivalent practical experience and relevant technical training.

Systems Engineering & Infrastructure:

• Operating Systems: Demonstrated competence in administering, securing, and hardening enterprise Linux (RHEL, Ubuntu, Oracle) and Windows Server environments according to CIS Benchmarks or NIST guidelines.
• Directory Services & Identity: Hands‑on experience managing Active Directory, Microsoft Entra ID (formerly Azure AD), Group Policy Objects (GPOs), IAM policies, and role-based access control (RBAC).
• Networking & Protocols: Strong practical understanding of core networking protocols (TCP/IP, DNS, DHCP, TLS/SSL, IPsec), routing/switching concepts, and enterprise firewall/VPN configurations.
• Virtualization & Cloud: Working experience deploying, configuring, and maintaining workloads within cloud platforms (OCI, AWS, Azure, or GCP) and hypervisors (VMware vSphere/ESXi, Hyper‑V, KVM, OLVM, or Proxmox).
• Automation & Scripting: Ability to write and maintain administrative and security automation scripts using PowerShell, Bash, or Python.

Security Analysis & Operations:

• Monitoring & Detection: Proven track record working with SIEM/XDR platforms (e.g., Splunk, Microsoft Sentinel, Elastic, Wazuh) to ingest logs, tune correlation rules, and triage security alerts.
• Endpoint & Threat Management: Experience deploying, configuring, and responding to alerts from enterprise EDR/XDR agents (e.g., CrowdStrike Falcon, SentinelOne, Microsoft Defender for Endpoint).
• Vulnerability Management: Hands‑on experience executing vulnerability scans (e.g., Tenable Nessus, Qualys, Rapid7), analyzing results, prioritizing risks (CVSS/EPSS), and coordinating remediation and patch management cycles.
• Incident Response: Practical experience conducting initial triage, containment, forensic log collection, and root‑cause analysis for security events.

Certifications:

• Active certifications in security or systems administration (e.g., CompTIA Security+/Network+/Linux+, Microsoft/Azure, AWS, or similar) are a plus, but practical experience is prioritized.