Senior SecOps Engineer Philippines

CyberOne; Manila; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

CyberOne is seeking a Senior SecOps Engineer to join our Microsoft Cyber Engineering Team remotely, with occasional travel. You will implement Defender and Sentinel, lead automation efforts, and collaborate with SOC Analysts to strengthen detection capabilities.

The role emphasizes delivering high‑quality security reports, staying current on threats, and mentoring junior staff. Relevant Microsoft certifications and strong English communication are essential.

Qualifications

• Microsoft certifications AZ-104, SC-200, AZ-500, AZ-305 are preferred or required.
• Solid background as a Security Engineer / SOC Engineer.
• Ability to lead and design automation/scripting in SIEM tools.
• Experience with SIEM solutions such as Azure Sentinel, Splunk, McAfee, Rapid7, LogRhythm, etc.
• Analysing cloud security risks, performing audits, and recommending cloud security controls.
• Excellent written and spoken English for high‑quality reports and client liaison.
• Ability to design and document security processes.
• Strong analytical mindset with experience using KQL and Microsoft security tech.

Responsibilities

• Implement and support Microsoft security products—Defender, Sentinel SIEM, and related tech.
• Design and refine engineering standards and best practices.
• Conduct periodic tenant health checks, audits, and architecture reviews.
• Collaborate with SOC Analysts to improve detection capabilities.
• Research and adopt new technologies for the SOC.
• Deploy automation to boost SOC operational effectiveness.
• Assist with incident triage and resolution with the team.
• Draft customer-facing reports and documents to high standards.
• Stay updated on cyber vulnerabilities and how Microsoft tools protect clients.
• Mentor junior team members when required.

Skills

Microsoft Certifications

Security Engineer

SIEM Automation

SIEM Tools

Cloud Security

English Proficiency

Security Processes

KQL & Microsoft Security

Job description

Job Description:

“I am hugely excited about my future and the future of CyberOne. I have enjoyed my time here immensely and have learnt a huge amount in a short space of time, year-for-year I've learnt more here than I have at Microsoft and PwC.” - CyberOne Consultant

About CyberOne

CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.

Job Title:

Senior SecOps Engineer

Location:

Remote; Occasional travel

Employment Type:

Full-time

The Role:

As a Microsoft Certified Cyber Partner, we are looking for a talented individual to join our Microsoft Cyber Engineering Team. The ideal candidate for this position will have previous experience as a Microsoft Engineer with a strong background in products such as Defender and Sentinel, ideally within a SOC environment. Your work will involve implementing technology and supporting our customers working alongside engineers, SOC Analysts, and other members of the delivery team,. This role has strong potential for career and training development as we deliver industry leading solutions to our customers.

Main Duties/Responsibilities

• Implementation and support of Microsoft security products - primarily Defender, SentinelSIEM as well as other adjacent security suite technologies
• Designing and refining engineering standards and best practices
• Conduct periodic Microsoft tenant health check assessments, audits, and architecture reviews
• Work alongside SOC Analysts to improve security event detection capability
• Research and implement new technologies that can be used within the SOC
• Deploy automation throughout the SOC to improve the overall operational effectiveness of the SOC
• Assisting with the triage and resolution of incidents alongside others
• Draft reports and customer-facing documents to a high standard
• Stay up to date with the latest cyber vulnerabilities and maintain an understanding of how Microsoft technologies can be used to protect clients
• Assist with the development of more junior members of the team where required

Essential Skills & Experience

• Any relevant Microsoft Certifications: AZ-104, SC-200, AZ-500, AZ-305
• Solid background as a Security Engineer / SOC Engineer
• Ability to lead and design automation/scripting in SIEM Tools
• Experience with SIEM solutions such as Azure Sentinel, Splunk, McAfee, Rapid7, LogRhythym etc
• Analysing cloud security risks and threats, performing cloud security audits and assessments, and recommending cloud security controls
• Excellent written and spoken English skills are vital for compiling high-quality reports and liaising with clients
• Ability to design and document security processes
• A strong analytical mindset with prior experience with KQL and related Microsoft Security technologies

Why Join Us?

• CyberOne Ranked #79 Globally in MSSP Alert’s 2025 Top 250 MSSPs
• Work with experienced cybersecurity professionals on meaningful, high-impact engagements
• Exposure to a wide range of industries, challenges, and modern Microsoft security solutions
• A collaborative environment that values expertise, autonomy, and continuous learning
• Competitive compensation, strong benefits, and a clear path for career progression

If you’re passionate about Security Engineering and want a role where your expertise genuinely makes a difference, we’d love to talk.

Let’s redefine what it means to be secure. Together.

#CyberDefenders