Senior Cybersecurity Engineer

TGT Global; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Health & Wellbeing: HMO from Day 1

24 PTOs and annual appraisals

Free daily meals & treats

Career development & certifications

Overseas training

Vibrant office culture

Eastwood location

Job summary

TGT Global in Manila’s Eastwood area seeks a Senior Security Engineer to review and improve security posture of client Microsoft 365 and Azure environments, deliver security configuration projects, and respond to incidents escalated by our 24/7 SOC.

Ideal candidate has 3–5 years in IT with 2–3 years hands-on Microsoft 365, Entra ID, and Intune administration; experience configuring Conditional Access, Intune, and Exchange Online; strong problem solving and scripting skills.

Qualifications

• 3–5 years in IT with 2–3 years hands-on Microsoft 365, Entra ID, and Intune administration.
• Configures Conditional Access, Intune, and Exchange Online independently.
• Has run Secure Score-style reviews and handled BEC and phishing incidents using playbooks.
• Can read, run, and safely modify PowerShell scripts.

Responsibilities

• Review and improve client Microsoft 365/Azure security posture.
• Deliver security configuration projects for clients.
• Respond to security incidents escalated by our 24/7 SOC.
• Perform Security Posture Review & Improvement tasks.
• Deploy and maintain DivergeIT security tools across clients.

Skills

Microsoft 365 administration

Entra ID administration

Intune administration

PowerShell scripting

Security incident handling

Risk assessment

Tools

PowerShell

DivergeIT

Job description

PROTECTION AND IMMUNITY, STARTING DAY ONE!

Grow your career while being supported with comprehensive HMO as early as your Day 1 with us!

Awesome perks await in #WeAreTGT: EASTWOOD!

• Health & Wellbeing: HMO from Day 1 (with dependent & dental coverage), psychiatric & medicine support, flu shots, life insurance
• Rewards & Recognition: 24 PTOs (with conversion), annual appraisals, awards, referral programs, company events
• Growth & Perks: Free daily meals & treats, career development, certifications, overseas training, vibrant office culture
• Vibrant City Location: Work in Eastwood (MDC100)

As a Senior Security Engineer

You'll be responsible for reviewing and improving the security posture of client Microsoft 365 and Azure environments, delivering security configuration projects, and responding to security incidents escalated by our 24/7 SOC.

Ideal Technical Profile

• 3–5 years in IT, with 2–3 years hands-on Microsoft 365, Entra ID, and Intune administration (MSP experience preferred).
• Configures Conditional Access, Intune, and Exchange Online independently from documented procedures.
• Has run Secure Score-style reviews and handled BEC and phishing incidents using playbooks.
• Can read, run, and safely modify PowerShell scripts.
• Strong problem-solving and decision-making skills.

Your Impact Starts Here

Security Posture Review & Improvement

• Review client tenants against Microsoft Secure Score and best practice: MFA and Conditional Access coverage, legacy authentication, admin role sprawl, device compliance, email security (SPF, DKIM, DMARC, anti-phishing), external sharing, app consents, and stale accounts.
• Confirm each finding with evidence from the live tenant, separating real gaps from false positives.
• Prioritize findings by risk and effort, recommend fixes, and implement approved improvements.
• Re-measure after changes and track each client's posture over time.

Security Confirgurations & Projects

• Entra ID: Conditional Access (report-only, pilot, then enforce), MFA and passkeys, privileged access, guest access.
• Intune: compliance and configuration policies, app deployment, remediation scripts, device hardening.
• Exchange Online & Purview: mail security, retention and litigation hold, mailbox permissions.
• Hybrid identity & Azure: Active Directory / Entra Connect, Azure network exposure and access.
• SecureIT services: deploy and maintain DivergeIT security tools across clients (SASE agents, phishing-report add-ins, pen-test sensors, endpoint protection).
• Access reviews: user access and admin role reviews; offboarding protection for departing users.

Incident Triage & Response

• Business email compromise: review sign-ins for token theft and AiTM attacks; revoke sessions and reset credentials and MFA; remove malicious inbox rules, forwarding, and app consents; identify fraudulent outbound mail.
• Ransomware & malware: isolate affected devices, disable compromised accounts, scope the spread, confirm backups, and elevate immediately.
• Phishing: triage reported messages, identify who received or clicked, purge the message tenant-wide, and block the sender.
• Account compromise: investigate risky sign-ins, suspicious role changes, and MFA fatigue attacks
• Escalate high-severity incidents (ransomware, BEC involving payments, admin compromise, data breach) to the Director of Security right away, with a written summary.
• Document a timeline, indicators of compromise, actions taken, and recommended hardening.

MORE THAN JUST A JOB

Headquartered across the Philippines' most dynamic cities in BGC, Eastwood, Alabang, and Cebu, and now expanding internationally with our first overseas office in Sri Lanka, we're building a workplace that puts people first.

Make the most of our 100% virtual recruitment.