Senior Endpoint Security Engineer — Remote Threat Modeling & Automation

Procter & Gamble Philippines; Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Performance bonus

Flexible schedule

Work from home

Health insurance

Fitness support

Employee Assistance Program

Job summary

Procter & Gamble Philippines is seeking a Senior Endpoint Security Engineer to lead threat modeling and automation across Windows, macOS, Linux, and Cloud/OT fleets. You will build data-driven threat models, create automated detection rules, and bridge endpoint telemetry with AI threat intelligence.

The role focuses on proactive defense, automated containment via SOAR, and cross-functional collaboration with IT, DevOps, and SOC teams to improve security posture and reduce operational toil.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent technical field.
• Certifications such as SANS/GIAC or Python/Automation are a plus.
• 3+ years in Endpoint Security, Detection Engineering, or SOC Automation across OS domains.

Responsibilities

• Architect data-driven threat models and dynamic attack path diagrams using live asset graphs and EDR/XDR telemetry.
• Design automated SOAR playbooks and machine-speed mitigation controls to neutralize exploits.
• Implement CIS benchmarks and ASR policies to reduce attack surface across endpoints.
• Collaborate with Business Tech, DevOps, and SOC teams to deploy endpoint automation without disrupting operations.
• Develop and refine AI-driven threat intelligence and integration with security tooling.

Education

Bachelor's degree in Computer Science / Cybersecurity or equivalent

SANS/GIAC or Python/Automation certifications

Tools

Falcon Fusion

Torq

XSOAR

CrowdStrike

CQL

Sigma

YARA

Job description

Procter & Gamble Philippines is seeking a Senior Endpoint Security Engineer to lead threat modeling and automation across Windows, macOS, Linux, and Cloud/OT fleets. You will build data-driven threat models, create automated detection rules, and bridge endpoint telemetry with AI threat intelligence.

The role focuses on proactive defense, automated containment via SOAR, and cross-functional collaboration with IT, DevOps, and SOC teams to improve security posture and reduce operational toil.