Senior Officer, Security Engineering

PDAX; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

PDAX is seeking a Security Operations professional to enhance threat detection and incident response across endpoints, networks, and cloud environments. You will design playbooks, align with MSOC workflows, and lead defensive engineering efforts to improve posture.

Required are 3–5+ years in security operations, hands-on incident response, and experience with MSOC providers; knowledge of MITRE ATT&CK and scripting is highly valued.

Qualifications

• 3–5+ years in Security Operations, Blue Team, or Incident Response.
• Hands-on experience responding to real-world cyber attacks.
• Proven experience with MSOC providers and incident response playbooks.
• Experience designing incident response playbooks and leading VAPT exercises.

Responsibilities

• Operate and improve SIEM, EDR/XDR, and cloud security monitoring.
• Develop detection use cases mapped to MITRE ATT&CK.
• Lead and support incident response for malware, phishing, account takeover, data exfiltration, ransomware, DDoS, and cloud attacks.
• Design and maintain incident response playbooks for high-impact scenarios.
• Align playbooks with tooling and MSOC workflows.
• Conduct tabletop exercises to validate readiness.
• Act as security engineering lead for Managed Security Operations (MSOC).
• Ensure logs, telemetry, and monitoring across endpoints, networks, cloud, and identity.
• Define alert thresholds, escalation criteria, and communication channels.

Skills

SIEM

EDR/XDR

MITRE ATT&CK

Incident Response

MSOC

Cloud security

Python

Tools

SIEM tools

EDR/XDR tools

VAPT tools

Job description

About PDAX At PDAX, we believe that the future of money is digital, and our mission is to empower all Filipinos to grow their wealth through blockchain technology.

About PDAX At PDAX, we believe that the future of money is digital, and our mission is to empower all Filipinos to grow their wealth through blockchain technology. As one of the first crypto firms in the Philippine market, we feel a sense of duty to our users and to the ecosystem to set the standard for safety, ease of access, and reliability. We expect our team to share in this responsibility and cherish our vision of a more open and equitable financial system. We are looking for new team members that are passionate about cryptocurrency, want to work in a disruptive, fastgrowing industry, and thrive in a startup environment. If this sounds like you, then we’d love to talk.

General Responsibilities

Key Responsibilities

Threat Detection & Incident Response

• Operate and continuously improve SIEM, EDR/XDR, and cloud security monitoring
• Develop and tune detection use cases mapped to MITRE ATT&CK
• Lead and support incident response for malware, phishing, account takeover, data exfiltration, ransomware, DDoS, and cloudnative attacks
• Perform root cause analysis and postincident reviews

Incident Response Readiness & Playbooks

• Design, create, and maintain incident response playbooks for highimpact attack scenarios
• Define triage steps, containment actions, escalation paths, and decision points
• Align playbooks with tooling, internal teams, and MSOC workflows
• Conduct tabletop exercises and simulations to validate readiness

Managed Security Operations (MSOC) Alignment

• Act as the primary security engineering lead for the organization’s Managed Security Operations (MSOC)
• Ensure the MSOC has proper log sources, telemetry, and monitoring coverage across endpoints, networks, cloud, and identity
• Define and enforce alerting thresholds, escalation criteria, and severity definitions
• Establish and maintain clear communication and escalation channels between the MSOC and the internal cyber defense team
• Lead regular operational reviews with the MSOC to assess detection quality, false positives, and response effectiveness
• Validate MSOC incident handling through drills, VAPT exercises, and real incidents

Defensive Engineering & Posture Hardening

• Execute containment actions (endpoint isolation, credential revocation, network blocking)
• Identify defensive gaps exposed through incidents, MSOC findings, and testing
• Improve logging, alert fidelity, and response workflows
• Endpoint, Identity & Cloud Defense

Detect and respond to endpoint, identity, and cloudbased threats

Internal & External VAPT / Attack Simulation

• Investigate suspicious service accounts, API keys, and programmatic access
• Monitor for IAM abuse, privilege escalation, and token misuse
• Design and execute internal VAPT and attack simulations

Threat Intelligence & Hunting

• Translate threat intelligence into actionable detections and threat hunts
• Conduct proactive threat hunting across endpoints, networks, and cloud telemetry

Reporting & Communication

• Produce clear incident, VAPT, and MSOC performance reports
• Communicate effectively with technical teams, MSOC providers, and leadership
• Maintain incident metrics, lessons learned, and readiness documentation

Qualifications

Experience

• 3–5+ years in Security Operations, Blue Team, or Incident Response
• Hands-on experience responding to real-world cyber attacks
• Proven experience working with or managing Managed Security Operations (MSOC) providers
• Experience designing incident response playbooks and leading VAPT exercises

Technical Skills

• Strong understanding of attack techniques across endpoint, network, identity, and cloud
• Deep familiarity with MITRE ATT&CK
• Hands-on experience with SIEM, EDR/XDR, cloud security telemetry, and vulnerability management
• Scripting or automation skills (Python, Bash, PowerShell)

Soft Skills

• Calm, structured decision-making under pressure
• Strong coordination and vendor-management skills in incident scenarios
• Ability to drive clarity across internal teams and external providers
• Clear technical and executive-level communication

Our Culture

Communication

• We prioritize clear and transparent communication, ensuring that there is clarity among everyone we work with.
• We aim to have a collaborative environment, where innovative ideas in investment strategies are shared openly and constructively, driving the industry forward.

Customer focus

• We think about how our decisions impact our customers and ensure we provide the best experience that we can.
• We believe in building lasting relationships with our clients, constantly learning from and listening to them, and always striving to look out for what’s best for both sides.

Commitment

• We always aim to do the right thing and to do the right thing, excellently. We take accountability seriously and uphold ourselves to high standards, ensuring that we execute with attention to detail.
• We are dedicated to the longterm success of our clients in the dynamic world of financial technology, maintaining integrity and professionalism in every aspect of our work.