Senior Cyber Security Engineer

Morgan McKinley; Philippines; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Morgan McKinley is seeking a Senior Cyber Security Engineer to proactively drive security capability development across cloud and on-prem environments. The role focuses on vulnerability management, access controls, platform engineering, and threat prevention.

You will work with stakeholders to embed security into designs and respond to incidents with automation. Ideal candidates have deep multi-domain security experience, strong scripting skills, and familiarity with cloud-native controls.

Qualifications

• 5–8 years of cybersecurity engineering experience across multiple domains.
• Strong scripting ability in Python, PowerShell or Bash.
• Experience with AWS security services and IAM controls.
• Knowledge of vulnerability management, SIEM, EDR, and DLP.
• Experience reviewing architecture documents for security risks.

Responsibilities

• Drive development of cyber security capability in line with threats.
• Lead vulnerability identification and remediation activities.
• Implement privileged access management and secure-by-design principles.
• Collaborate with solution architects to embed security in cloud designs.
• Provide security tooling metrics and input on architecture briefs.
• Remediate pen test findings and maintain tooling effectiveness.

Job description

The Senior Cyber Security Engineer has the remit of proactively driving development of the cyber security capability in line with the evolving threat landscape. This includes; vulnerability management, access control, security platform engineering, detection and response activities.

Role Responsibilities

• Security platform engineering and projects
• Vulnerability identification and remediation
• Privileged access management
• Maintain current tooling operating effectiveness
• Identify areas for improvement within current tooling
• Proactively identify opportunities for control improvements
• Develop strong relationships with stakeholders across the business
• Provide security tooling metrics
• Review and provide security input on architecture design briefs and technical solution documents
• Collaborate with solution architects to ensure security is embedded in system and cloud designs
• Penetration test report remediation
• Define and validate security controls across cloud environments, particularly AWS
• Maintain awareness of cloud security architecture best practices and emerging technologies
• Support the development and implementation of secure-by-design principles across projects
• Maintain knowledge of current ATP TTPs
• Maintain knowledge of security tool landscape

Experience / Competences

Required

• 5 to 8 years of Cybersecurity experience.
• Broad Cybersecurity Engineering Background: Deep technical exposure across multiple security domains rather than administration of a single tool.
• Experience implementing vulnerability management, SIEM, PAM, IDS/IPS, EDR, DLP, CNAPP and AV platforms
• Intermediate level knowledge of incident response processes for OS and network level events
• Comfortable with Windows and Linux operating systems
• Solid knowledge of networking, active directory and web applications
• Demonstrated ability to write automation scripts (Python, PowerShell, Bash) from scratch to solve complex enterprise problems, without reliance on AI or pre-written templates.
• Experience with reviewing and implementing Cloud security controls
• Experience reviewing architecture design documents and identifying security risks
• Strong understanding of AWS security services and controls (e.g., IAM, Guard Duty, SCPs, KMS)
• Proven ability to act autonomously during critical incidents, including troubleshooting complex issues without standard playbooks.
• Strong executive communication skills, with the ability to translate technical P1/P0 security incidents into clear business risks for non-technical stakeholders.
• Familiarity with cloud-native security frameworks and reference architectures

Nice-to-Have

• Previous leadership or mentoring experience is beneficial but not required
• Highly advantageous to have direct engineering experience with CrowdStrike (EDR/XDR) and/or Fortinet (Network Security/Firewalls).
• Incident response and forensics
• Degree level accreditation or equivalent experience
• OSCP, CEH or SANS certification
• Experience with threat modelling and secure design principles

Work Setup:

• Type: Full time, Permanent
• Shift: Mid shift aligned with EMEA timezone
• Onboarding: First month fully onsite; then hybrid 3 days onsite per week