Senior Security Engineer

TGT Global; Quezon City; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

HMO from Day 1

PTO 24 days

Annual appraisals

Awards & referral programs

Company events

Free daily meals

Career development

Overseas training

Vibrant office culture

Job summary

TGT Global seeks a Senior Security Engineer to enhance client Microsoft 365/Azure security, run configuration projects, and respond to incidents escalated by a 24/7 SOC.

Ideal candidates have hands-on MS 365, Entra ID, Intune management, PowerShell skills, and strong problem-solving ability, with MSP experience preferred. Eastwood, Manila area.

Qualifications

• 3–5 years in IT with hands-on Microsoft 365, Entra ID, and Intune administration.
• Ability to configure Conditional Access, Intune, and Exchange Online independently.
• Experience with Secure Score reviews and handling BEC/phishing incidents using playbooks.
• Capable of reading, running, and safely modifying PowerShell scripts.
• Strong problem-solving and decision-making skills.

Responsibilities

• Security posture review and improvement: assess MFA, CA coverage, device compliance, and email security.
• Lead security configuration projects across Microsoft 365 and Azure environments.
• Incident triage and response for BEC, ransomware, phishing, and account compromise.
• Collaborate with SOC and clients to implement approved hardening measures.
• Document actions, provide timelines, and measure posture over time.

Skills

IT experience

Microsoft 365

Entra ID

Intune administration

Conditional Access

PowerShell

Incident response

Problem solving

Tools

PowerShell

Microsoft 365

Entra ID

Intune

Job description

Job Description:

PROTECTION AND IMMUNITY, STARTING DAY ONE!

Grow your career while being supported with comprehensive HMO as early as your Day 1 with us!

Awesome perks await in #WeAreTGT: EASTWOOD!

• Health & Wellbeing: HMO from Day 1 (with dependent & dental coverage), psychiatric & medicine support, flu shots, life insurance

• Rewards & Recognition: 24 PTOs (with conversion), annual appraisals, awards, referral programs, company events

• Growth & Perks: Free daily meals & treats, career development, certifications, overseas training, vibrant office culture

• Vibrant City Location: Work in Eastwood (MDC100)

As a Senior Security Engineer

Youll be responsible for reviewing and improving the security posture of client Microsoft 365 and Azure environments, delivering security configuration projects, and responding to security incidents escalated by our 24/7 SOC.

Ideal Technical Profile

• 3–5 years in IT, with 2–3 years hands‑on Microsoft 365, Entra ID, and Intune administration (MSP experience preferred).

• Configures Conditional Access, Intune, and Exchange Online independently from documented procedures.

• Has run Secure Score‑style reviews and handled BEC and phishing incidents using playbooks.

• Can read, run, and safely modify PowerShell scripts.

• Strong problem‑solving and decision‑making skills.

Your Impact Starts Here

Security Posture Review & Improvement

• Review client tenants against Microsoft Secure Score and best practice: MFA and Conditional Access coverage, legacy authentication, admin role sprawl, device compliance, email security (SPF, DKIM, DMARC, anti‑phishing), external sharing, app consents, and stale accounts.

• Confirm each finding with evidence from the live tenant, separating real gaps from false positives.

• Prioritize findings by risk and effort, recommend fixes, and implement approved improvements.

• Re‑measure after changes and track each clients posture over time.

Security Confirgurations & Projects

• Entra ID: Conditional Access (report‑only, pilot, then enforce), MFA and passkeys, privileged access, guest access.

• Intune: compliance and configuration policies, app deployment, remediation scripts, device hardening.

• Exchange Online & Purview: mail security, retention and litigation hold, mailbox permissions.

• Hybrid identity & Azure: Active Directory / Entra Connect, Azure network exposure and access.

• SecureIT services: deploy and maintain DivergeIT security tools across clients (SASE agents, phishing‑report add‑ins, pen‑test sensors, endpoint protection).

• Access reviews: user access and admin role reviews; offboarding protection for departing users.

Incident Triage & Response

• Business email compromise: review sign‑ins for token theft and AiTM attacks; revoke sessions and reset credentials and MFA; remove malicious inbox rules, forwarding, and app consents; identify fraudulent outbound mail.

• Ransomware & malware: isolate affected devices, disable compromised accounts, scope the spread, confirm backups, and elevate immediately.

• Phishing: triage reported messages, identify who received or clicked, purge the message tenant‑wide, and block the sender.

• Account compromise: investigate risky sign‑ins, suspicious role changes, and MFA fatigue attacks

• Escalate high‑severity incidents (ransomware, BEC involving payments, admin compromise, data breach) to the Director of Security right away, with a written summary.

• Document a timeline, indicators of compromise, actions taken, and recommended hardening.

MORE THAN JUST A JOB

Headquartered across the Philippines most dynamic cities in BGC, Eastwood, Alabang, and Cebu, and now expanding internationally with our first overseas office in Sri Lanka, were building a workplace that puts people first.

Requirements: