Senior IT Security Engineer: Incident Response & Forensics

RCBC; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

RCBC is seeking a senior cybersecurity operations engineer to safeguard the bank’s IT environment and lead the adoption of next-generation security technologies. You will drive incident response, conduct forensics, and deploy advanced tools across the security stack.

You will also champion data protection, encryption, and tokenization strategies while mentoring junior staff and guiding cross-functional IT teams to ensure resilient security postures in a high-pressure environment.

Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, or a related field.
• 5+ years of dedicated technical experience in Cybersecurity Operations or Engineering.
• Advanced proficiency with deploying and tuning EDR/XDR solutions to hunt for APTs.
• Hands-on experience with Next-Gen Firewalls (NGFW), IDS/IPS, VPNs, and ZTNA.
• Proven ability to perform memory, disk, and network forensics.
• Knowledge of cryptographic protocols, KMS, and data masking/tokenization.
• Experience with SAST/DAST tools and CI/CD security.
• Analytical mindset and calm under pressure during crises.

Responsibilities

• Lead incident response and forensic investigations into security breaches.
• Oversee hands-on rollout of advanced security technologies and initiatives.
• Act as technical lead for new security projects from design to deployment.
• Configure and optimize security stack including EDR/NGFW/IDSes/ZTNA.
• Implement encryption and tokenization to protect data at rest and in transit.
• Mentor junior staff and advise cross-functional IT teams.

Skills

5+ years cybersecurity ops/engineering

EDR/XDR deployment

NGFW/IDS/IPS

ZTNA (Zero Trust)

Memory/Disk/Network forensics

Cryptographic protocols & KMS

SAST/DAST security tooling

Crisis management under pressure

Education

Bachelor’s degree in CS/Cyber Security

Tools

EDR/XDR platforms

NGFW/IDS/IPS tooling

CI/CD security tooling

Job description

RCBC is seeking a senior cybersecurity operations engineer to safeguard the bank’s IT environment and lead the adoption of next-generation security technologies. You will drive incident response, conduct forensics, and deploy advanced tools across the security stack.

You will also champion data protection, encryption, and tokenization strategies while mentoring junior staff and guiding cross-functional IT teams to ensure resilient security postures in a high-pressure environment.