Senior Cyber Security Engineer - AI-First Cloud & IR Lead

Gotyme Ph; Philippines; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

GoTyme is seeking a Senior Cyber Security Engineer to join our security team in Quezon City. This role emphasizes an AI‑and automation‑first mindset, technical leadership, and the ability to design, improve, and scale security controls across cloud, endpoint, and identity environments.

The successful candidate will lead complex investigations, drive proactive threat detection, mentor junior engineers, and partner with technology and business teams to continually strengthen the organisation’s

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7–10+ years of hands-on cybersecurity engineering, SOC, or security operations roles.
• Experience leading complex security investigations and incident response.
• Proven ability to design, tune, and maintain security detections at scale.
• Experience mentoring or technically leading other security practitioners.
• Deep expertise in AWS security services (CloudTrail, GuardDuty, Config, Security Hub).
• Strong experience with Azure security tooling (Sentinel, Defender, Security Center).
• Advanced knowledge of EDR/XDR platforms and endpoint telemetry.
• Hands-on experience with SIEM, SOAR, and log analytics.
• Strong understanding of networking, IAM, authentication protocols, and attack vectors.
• Proficiency in Python, PowerShell, or Bash for automation and analysis.
• Experience applying threat hunting and detection engineering methodologies.
• Familiarity with AI-driven security tooling and prompt-based analysis.

Responsibilities

• Security Monitoring, Engineering & Analysis: lead advanced monitoring across AWS, Azure, and endpoints; develop detection logic with CloudTrail, GuardDuty, Security Hub,Azure Sentinel, Defender, and EDR/XDR tools; identify gaps across cloud and SaaS; automate detections and responses; analyze DLP alerts.
• Incident Response, Forensics & Crisis Management: act as lead investigator for high-severity incidents; drive containment, eradication, and recovery; perform host, cloud, and log forensic analysis; produce executive reports and post-incident plans; support IR playbooks.
• Threat Detection, Hunting & Intelligence: lead threat hunting using analytics and threat intel; map detections to MITRE ATT&CK; conduct malware analysis; translate intel into detections and controls; stay ahead of cloud-native threats.
• Identity, Access & Privileged Security: monitor privileged access; lead IAM reviews; pursue least-privilege and zero-trust; investigate anomalous authentication; strengthen security architecture with IAM teams.
• Security Engineering, Architecture & Enablement: design and improve cloud and enterprise security architectures; define security requirements; support compliance (ISO 27001, SOC 2, NIST, PCI DSS); mentor engineers; influence security strategy.

Skills

Leadership

Incident response

Threat hunting

AWS security

Azure security

EDR/XDR

Automation scripting

Threat intelligence

IAM security

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

SIEM

SOAR

EDR/XDR tooling

Cloud security tools

Job description

GoTyme is seeking a Senior Cyber Security Engineer to join our security team in Quezon City. This role emphasizes an AI‑and automation‑first mindset, technical leadership, and the ability to design, improve, and scale security controls across cloud, endpoint, and identity environments.

The successful candidate will lead complex investigations, drive proactive threat detection, mentor junior engineers, and partner with technology and business teams to continually strengthen the organisation’s