Senior IT Security Engineer

anchored solutions mnl, inc.; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

anchored solutions mnl, inc. is seeking a Senior IT Security Engineer to implement and maintain secure IT infrastructure with a security-first approach. The role emphasizes hands-on security configuration, threat response, and collaboration with IT operations to embed security best practices.

The candidate will manage cloud-based security, vulnerability remediation, and automation using PowerShell, Python, and automation platforms, aligning with NIST/CIS/ISO 27002 standards.

Qualifications

• 3-7 years hands-on IT infrastructure, security operations and security engineering experience.

Responsibilities

• Design, implement and manage IT infrastructure security across cloud and on-premises environments.
• Monitor security events and respond to incidents including ransomware, phishing, malware, and APTs.
• Oversee vulnerability assessments and patch management to minimize risks.
• Assist in implementing security policies per NIST, CIS, ISO 27002.
• Automate repetitive tasks using PowerShell and Python; leverage Power Automate, Zapier, Make.

Skills

Microsoft 365

Intune

Exchange

PowerShell

Python

SIEM

EDR

DLP

SWG

CASB

SSE/SASE

Vulnerability remediation

Education

Bachelor's degree in IT/CS

Tools

Power Automate

Zapier

Make

Azure AD

Job description

***Note: This position is open to applicants based in the Philippines only.

JOB SUMMARY

The Senior IT Security Engineer will be a technical expert responsible for implementing, configuring, and maintaining the organization’s IT infrastructure with a security-first approach. This role focuses on executing hands‑on tasks to secure and optimize IT systems, ensure compliance with industry standards, and respond effectively to emerging threats. The engineer will collaborate with team leaders and stakeholders to integrate security best practices across IT operations.

DUTIES AND RESPONSIBILITIES

IT Infrastructure Design, Security, and Management:

• Support and automate the organization’s internal IT stack to meet business scaling requirements.
• Configure and maintain cloud-based technologies to enhance infrastructure efficiency and security.
• Design, implement, and manage IT infrastructure components, including Secure Web Gateways (SWG), Cloud Access Security Brokers (CASB), and Security Service Edge (SSE)/Secure Access Service Edge (SASE) solutions.
• Deploy and manage modern workspace solutions, including Microsoft 365, Intune, and Azure AD, ensuring robust cloud identity directory services.

Threat Monitoring and Incident Response:

• Monitor network traffic, system logs, email security platforms, and Endpoint Detection and Response (EDR) tools for security threats.
• Investigate and resolve security incidents, including ransomware, phishing, malware, and Advanced Persistent Threats (APTs).
• Execute incident response processes to contain threats, minimize impact, and document lessons learned.
• Analyze security alerts from antivirus (AV) and EDR platforms to ensure prompt resolution and

Vulnerability and Patch Management:

• Conduct regular vulnerability assessments to identify and remediate security risks in IT systems and applications.
• Oversee the deployment of patches and security updates, ensuring minimal disruption to operations.

Policy and Compliance:

• Assist in implementing IT security policies and procedures in alignment with industry frameworks such as NIST, CIS, and ISO 27002.
• Contribute to security awareness initiatives to educate users about best practices and risk mitigation.

Automation and Optimization:

• Automate repetitive tasks using scripting tools like PowerShell and Python to improve efficiency.
• Utilize automation platforms such as Power Automate, Zapier, and Make to streamline workflows.

Collaboration and Technical Support:

• Collaborate with team leaders and IT staff to integrate security best practices into existing and new systems.
• Provide technical support and recommendations for security enhancements and improvements.

QUALIFICATIONS

Education and Experience:

• 3-7 years of hands‑on IT Infrastructure, security operations and security engineering experience.

Certifications:

• Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft certifications (e.g., SC-100, SC-300), and ITIL.

Technical Skills:

• Expertise in Microsoft 365, Intune, and Exchange for managing and securing IT environments.
• Hands‑on experience automating tasks using scripting tools like PowerShell and Python, and platforms like Power Automate, Zapier, and Make.
• Proficiency in security technologies such as SIEM, EDR, DLP, SWG, CASB, and SSE/SASE.
• Extensive experience in vulnerability remediation and patch management, ensuring timely resolution of security gaps.
• Familiarity with security frameworks like OWASP and standards such as NIST, CIS, and ISO 27002.

Soft Skills:

• Strong analytical and problem‑solving abilities with a focus on technical execution.
• Effective communication skills for collaborating with team members and explaining technical solutions.
• Ability to work independently and take ownership of technical projects and tasks