Senior AI-Driven Security Engineer & Threat Hunter

Axos Business Center; Taguig; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

Axos Bank is seeking a Senior Security Engineer to lead investigations, develop high‑fidelity detections, and advance our AI SOC platform. This role focuses on engineering beyond traditional SOC analysis, with emphasis on proactive threat hunting and scalable automation.

You will mentor junior staff, own incident response across cloud, identity, endpoint, and network, and ensure rapid, quality investigations.

Qualifications

• 5+ years of experience in cybersecurity (incident response, threat detection, security engineering, or threat hunting).
• Strong technical expertise in cloud security, identity security, endpoint telemetry, network analysis, or application security.
• Proven ability to perform deep‑dive incident investigations involving cloud IAM, lateral movement, privilege escalation, API abuse, malware, or application‑layer threats.
• Hands‑on experience with SIEMs (Splunk preferred), EDR tools, SOAR platforms, and automation frameworks.
• Ability to write and tune detection rules, correlation logic, saved searches, and behavioral analytics.
• Strong scripting ability (Python preferred) and familiarity with data analysis techniques.
• Willingness and ability to participate in a mandatory on‑call rotation and act as a senior escalation point during high‑severity incidents.

Responsibilities

• Lead complex security incident investigations across cloud, identity, endpoint, application, and network layers.
• Perform root‑cause analysis, kill‑chain reconstruction, and evidence preservation with engineering‑grade depth.
• Convert investigation findings into new detections, automation playbooks, and AI features to reduce recurrence and gaps.
• Participate in a mandatory on‑call rotation, serving as a senior escalation point for complex security incidents.
• Design, build, and tune high‑fidelity detection logic across Splunk, SOAR, cloud platforms, and other security telemetry systems.
• Establish repeatable processes for hypothesis‑driven detection creation, simulation, validation, and tuning.
• Improve detection precision by reducing false positives and strengthening behavioral and contextual analytics.
• Conduct proactive, intelligence‑driven hunts across large datasets using advanced analytics, anomaly detection, and adversary‑emulation techniques.
• Identify unknown threats, emerging attacker behaviors, and gaps in telemetry or tooling.
• Translate hunting insights into durable detections, AI models, automated enrichment, and new investigation workflows.
• Improve the AI SOC platform’s ability to perform autonomous or semi‑autonomous investigations by contributing high‑value signals, features, and decision logic.
• Work closely with AI and Security Engineering leadership to integrate hunting patterns, investigation heuristics, and detection insights into AI pipelines.
• Build feedback loops that allow AI models to learn from analyst investigations and improve over time.
• Create high‑reliability automation workflows that handle triage, enrichment, correlation, and containment actions.
• Collaborate with Detection Engineering and Splunk/automation teams to integrate new data sources, threat‑intelligence feeds, and enrichment pipelines.
• Work closely with SecOps, Cloud, AppSec, Detection Engineering, and AI Engineering teams to strengthen detection coverage and reduce operational friction.
• Produce high‑quality documentation, playbooks, knowledge articles, and engineering runbooks.
• Mentor SOC analysts, junior engineers, and cross‑team partners to uplift investigation quality and detection maturity.

Skills

Incident response

Threat detection

Security engineering

Threat hunting

Python scripting

Cloud security

Identity security

Endpoint telemetry

Automation frameworks

Tools

Splunk

SOAR platforms

EDR tools

Automation frameworks

Job description

Axos Bank is seeking a Senior Security Engineer to lead investigations, develop high‑fidelity detections, and advance our AI SOC platform. This role focuses on engineering beyond traditional SOC analysis, with emphasis on proactive threat hunting and scalable automation.

You will mentor junior staff, own incident response across cloud, identity, endpoint, and network, and ensure rapid, quality investigations.