Senior Security Engineer

BDO LLP; Santo Niño 1st; Vor Ort; PHP 900.000 - 1.300.000; Vollzeit

Zusammenfassung

BDO LLP is seeking an experienced cybersecurity professional to monitor security operations, lead incident response, and drive improvements across risk governance. The role includes coordinating VAPT efforts, cloud security reviews in Microsoft Azure, and awareness initiatives.

The candidate should have strong analytical skills, excellent communication, and a proactive, ownership-driven approach. This position is based in the Philippines, with focus on SOC operations and regulatory alignment.

Qualifikationen

• Minimum 5 years of relevant cyber security experience or equivalent.

Aufgaben

• Review security alerts from SOC and perform incident triage and follow-up.

Kenntnisse

SOC monitoring & incident response

VAPT

Azure

Microsoft 365

Information security standards

Analytical & investigative skills

Communication skills

Self-motivated & proactive

Ownership & continuous improvement

Ausbildung

Higher NITEC in Cyber & Network Security

Diploma in Cyber Security / Information Security

Bachelor’s Degree in Cyber Security/IT

Tools

Microsoft 365

Azure

Jobbeschreibung

Responsibilities:

1. Security Monitoring and Incident Response

• Review security alerts generated by the Security Operations Centre (SOC).

• Investigate, triage and follow up on security events and incidents.

• Support the development, tuning and optimisation of security detection use cases.

• Assist in threat hunting activities to identify potential security threats.

• Support incident response activities, including investigation, containment and post-incident reporting.

2.Vulnerability Assessment and Penetration Testing (VAPT)

• Coordinate with external security vendors on vulnerability assessments, penetration testing and source code review activities.

• Track remediation efforts and ensure timely closure of identified vulnerabilities.

• Maintain vulnerability registers and assist in preparing vulnerability management dashboards.

3.Security Awareness and User Education

• Support the delivery of cybersecurity awareness programs through the organisation’s e-learning platform.

• Plan, execute and monitor phishing simulation campaigns.

• Promote security best practices and contribute to user awareness initiatives across the organisation.

4.Cloud Security

• Review Microsoft Azure configurations against security best practices and organisational standards.

• Assist in implementing and validating security controls within the Microsoft Azure environment.

• Support virtual machine (VM) hardening and cloud security configuration reviews.

• Perform cloud security posture assessments and track remediation of identified security gaps.

5.Governance, Risk and Compliance (ISO27001 / CTM / DPTM)

• Support internal and external audit activities related audit activities related to information security.

• Maintain and update information security risk registers arising from audit findings and risk assessments.

• Monitor the progress of corrective actions and ensure timely remediation.

Requirements:

• Higher NITEC in Cyber & Network Security, Diploma, Bachelor’s Degree or equivalent qualification in Cyber Security, Information Security, Computer Science, Information Technology or a related discipline.

• Minimum 5 years of relevant experience in cybersecurity, IT security operations, security governance or a related information security role.

• Professional security certifications will be an advantage.

• Working knowledge or exposure to one of more of the following areas will be an advantage:

• Security Operations Centre (SOC) monitoring and incident response.
• Vulnerability Assessment and Penetration Testing (VAPT)
• Microsoft 365 and Azure
• Information security standards and regulatory frameworks such as ISO27001, CTM, DPTM, NIST, PDPA and MAS TRM.

• Strong analytical, problem-solving and investigative skills with the ability to assess security risks and recommend practical solutions.
• Excellent written and verbal communication skills with the ability to communicate effectively with both technical and non-technical stakeholders.
• Self-motivated, proactive and able to work independently as well as collaboratively in a team environment.
• Demonstrates ownership, initiative and a continuous improvement mindset, with the confidence to challenge conventional approaches and recommend innovative security solutions.
• Passionate about cybersecurity and committed to continuous learning and keeping abreast of emerging threats, technologies and industry best practices.