Senior Cyber Security Engineer: Cloud, IR & Threat Hunting

GoTyme PH (Philippines); Quezon City; On-site; PHP 1,500,000 - 2,600,000; Full time

Job summary

GoTyme is hiring a Senior Cyber Security Engineer to lead monitoring, detection, and incident response across cloud, endpoint, and identity environments. You will design scalable security controls, mentor engineers, and partner with teams to strengthen the organisation's security posture.

The role emphasizes an AI- and automation-first mindset, with expertise in MITRE ATT&CK mappings, SIEM/SOAR, and cloud-native security tooling. You will report to the Security Team at GoTyme PH.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7-10+ years of hands-on experience in cybersecurity engineering, SOC, or security operations roles.
• Demonstrated experience leading complex security investigations and incident response.
• Strong understanding of AWS security services and Azure tooling.
• Hands-on with SIEM, SOAR, and log analytics platforms.

Responsibilities

• Lead advanced monitoring and analysis of security events across AWS, Azure, and endpoints.
• Design, enhance, and optimise detection logic using CloudTrail, GuardDuty, Security Hub, Sentinel, Defender, and EDR/XDR tools.
• Drive end-to-end incident response activities including containment, eradication, and recovery.
• Produce executive-level incident reports, root-cause analyses, and post-incident improvements.
• Mentor junior engineers and analysts, and strengthen security posture across cloud and on-prem environments.

Skills

AWS security

Azure security

EDR/XDR

SIEM/SOAR

Threat hunting

Incident response

IAM and zero-trust

MITRE ATT&CK mapping

Python/PowerShell/Bash

Security architecture

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

CloudTrail

GuardDuty

Config

Security Hub

Azure Sentinel

Defender

EDR/XDR platforms

SIEM

SOAR

Job description

GoTyme is hiring a Senior Cyber Security Engineer to lead monitoring, detection, and incident response across cloud, endpoint, and identity environments. You will design scalable security controls, mentor engineers, and partner with teams to strengthen the organisation's security posture.

The role emphasizes an AI- and automation-first mindset, with expertise in MITRE ATT&CK mappings, SIEM/SOAR, and cloud-native security tooling. You will report to the Security Team at GoTyme PH.