Senior IAM & Security Operations Engineer

UltaHost; Cebu City; On-site; PHP 1,000,000 - 1,300,000; Full time

Job summary

UltaHost in the Philippines is seeking a Senior Internal Security & Security Operations Engineer to take end-to-end ownership of internal security, IAM, and SOC operations. You will strengthen protections for employee identities, systems, and day-to-day operations across cloud and on-prem environments.

You will lead access governance, monitoring, and incident response, coordinating with HR, IT, and product teams to drive remediation and risk reduction while enhancing detection and response

Qualifications

• 5+ years of hands-on experience in internal security, IAM, SOC/security operations, incident response, or a closely related role.
• Practical experience with RBAC, MFA, SSO, PAM, identity providers, password management, account lifecycle management, and access auditing.
• Hands-on experience with SIEM, EDR, IDS/IPS, centralized logging, authentication logs, alert triage, and case management.
• Proven ability to investigate compromised accounts, malware, credential leaks, suspicious authentication activity, insider risk, and unauthorized access.
• Strong understanding of Linux access, SSH, VPN, endpoints, cloud/SaaS administration, email security, and remote-workforce security.
• Strong organizational skills and ability to enforce security controls while collaborating with HR, IT, managers, and system owners.

Responsibilities

• Design and maintain RBAC across departments, roles, and critical systems.
• Manage MFA, SSO, PAM, password vaults, API keys, SSH keys, recovery codes, and secrets.
• Own onboarding, role changes, temporary access, contractor access, and offboarding controls.
• Identify and remove shared, dormant, unnecessary, and excessively privileged accounts.
• Conduct regular access reviews and maintain approval and audit evidence.
• Monitor and investigate alerts from SIEM, EDR, IDS/IPS, authentication systems, cloud/SaaS platforms, internal applications, and endpoints.
• Investigate suspicious logins, compromised accounts, credential leaks, malware, privilege abuse, insider risk, and unauthorized access.
• Collect evidence, contain threats, coordinate recovery, and drive corrective actions through closure.
• Maintain detection rules, alert quality, incident records, escalation paths, and response playbooks.
• Lead internal security incidents and support infrastructure/product incidents involving identities or credentials.
• Define security requirements for laptops, VPN and remote access, email, code repositories, support platforms, finance tools, and administrative systems.
• Work closely with HR and IT on joiner/mover/leaver processes and internal security investigations.
• Support security awareness, phishing prevention, and secure handling of sensitive information and credentials.

Skills

IAM

SOC/security operations

Incident response

RBAC

MFA & SSO

PAM

Cloud/SaaS security

Linux access

Remote-workforce security

Tools

SIEM

EDR

IDS/IPS

Centralized logging

Job description

UltaHost in the Philippines is seeking a Senior Internal Security & Security Operations Engineer to take end-to-end ownership of internal security, IAM, and SOC operations. You will strengthen protections for employee identities, systems, and day-to-day operations across cloud and on-prem environments.

You will lead access governance, monitoring, and incident response, coordinating with HR, IT, and product teams to drive remediation and risk reduction while enhancing detection and response