Senior Endpoint Security Engineer: Automations & Detection

Procter & Gamble; Manila; On-site; PHP 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Performance bonus (STAR)

Flexible work schedule with possible W

Health insurance

Fitness support

Employee Assistance Program

Job summary

Procter & Gamble in Manila is seeking a Senior Endpoint Security Engineer to lead our next-generation threat modeling and security automation program. You will shape proactive defenses across Windows, macOS, Linux, and Cloud/OT environments, building automated workflows and detection rules that stay ahead of AI-driven exploits.

You will integrate live telemetry, AI threat intelligence, and SOAR platforms to reduce incident response times while improving SOC efficiency.

Qualifications

• Hands-on automation and SecOps engineering with SOAR playbooks.
• Experience with multi-OS telemetry, EDR/XDR, and threat modeling.
• Proficiency in Python, PowerShell, or Bash for API automation.
• Experience implementing automated virtual patching and host defense.
• Knowledge of MITRE ATT&CK framework and detection rules.

Responsibilities

• Lead threat modeling and detection engineering across Windows, macOS, Linux, and Cloud/OT.
• Design automated containment playbooks using SOAR platforms to reduce MTTC.
• Collaborate with IT, DevOps, and SOC teams to integrate endpoint models into operations.
• Evaluate GenAI security capabilities and integrate into the endpoint platform.
• Drive proactive threat intelligence and incident response automation.

Skills

Automation & SecOps

Endpoint Security

Threat Modeling

Scripting & API Integration

Cross-Platform OS expertise

GenAI & Threat Intelligence

Education

Bachelor's degree in Computer Science or related field

SANS/GIAC Certification preferred

Tools

Falcon Fusion

Torq

XSOAR

CrowdStrike (CQL)

Sigma

YARA

Job description

Procter & Gamble in Manila is seeking a Senior Endpoint Security Engineer to lead our next-generation threat modeling and security automation program. You will shape proactive defenses across Windows, macOS, Linux, and Cloud/OT environments, building automated workflows and detection rules that stay ahead of AI-driven exploits.

You will integrate live telemetry, AI threat intelligence, and SOAR platforms to reduce incident response times while improving SOC efficiency.