Senior Security Engineer

CITADEL Pacific Ltd; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

CITADEL Pacific Ltd. in the Philippines seeks a Senior Security Engineer to lead design, implementation, and continuous improvement of priority cybersecurity controls across platforms, identity and privileged access, endpoint and data protection, email security, and vulnerability management.

The role drives technical delivery of the security roadmap, provides direction to engineers and partners, and remains an individual contributor while ensuring solutions are integrated, operable, and

Qualifications

• 7+ years in cybersecurity or security engineering with proven technical leadership.
• Hands-on experience across IAM/PAM, endpoint/EDR, MDM, DLP, email security, SIEM/telemetry, vulnerability management, cloud security, and automation.
• Strong scripting, API, troubleshooting, and stakeholder-management skills.
• Ability to influence across Infra, Cloud, Applications, Risk and Vendors.
• NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and Zero Trust knowledge.
• Excellent written and verbal communication with technical and nontechnical stakeholders.
• Detail-oriented with high documentation quality and operational discipline.

Responsibilities

• Lead enterprise security platforms' ownership, configuration, and lifecycle.
• Own PAM implementation with vaulting, MFA, session controls, and access governance.
• Translate roadmaps into requirements, designs, runbooks, and metrics.
• Provide engineering guidance to Cybersecurity Analysts and coordinate partners.
• Drive continuous improvement across security monitoring, telemetry, and automation.
• Oversee onboarding of log sources, data validation, and integrations across domains.

Skills

Scripting

API development

Troubleshooting

Documentation

Stakeholder management

Communication

Problem solving

Analytical thinking

Leadership by influence

Operational discipline

Education

IT-related degree

Tools

IAM/PAM

EDR

MDM

DLP

Purview

SIEM

Automation

Orchestration

Vulnerability management

Cloud security

Security telemetry

MDR/MSOC

Job description

The Senior Security Engineer serves as the cybersecurity team's technical lead for the design, implementation, integration, and continuous improvement of priority cybersecurity controls. The role leads technical delivery of the security roadmap across security platforms, identity and privileged access, endpoint and device security, data protection, email security, vulnerability and exposure management, security telemetry, and automation. It provides technical direction, drives cross-functional implementation, and ensures security solutions are effectively integrated, operationalized, and continuously improved, while remaining an individual contributor without formal people-management responsibility.

Job Responsibilities:

The role serves as the primary technical owner for enterprise security platforms, vulnerability and exposuremanagement capabilities, security telemetry, integrations, orchestration, automation, and security monitoring infrastructure. Domain-specific security engineers are responsible for defining control requirements,detection use cases, and operational outcomes within their respective technology domains.

The role is expected to provide engineering ownership, operational oversight, and continuous improvementacross the following cybersecurity domains:

• Security platforms and security operations technologies
• Vulnerability management, exposure management, and attack surface reduction
• Security telemetry, visibility, observability, and data quality
• Security integrations, automation, orchestration, and API-enabled workflows
• Security monitoring, analytics, detection engineering support, reporting platforms, and telemetrymanagement.
• Security service edge and related cloud-delivered security technologies

• Lead technical planning and delivery across PAM, DLP, MDM,Secure Email Gateway, SSE, Vulnerability and Exposuremanagement, security monitoring, automation and MDR/MSOCintegration.
• Convert roadmap outcomes into requirements, designs,implementation plans, acceptance criteria, runbooks, metrics andoperational handover.
• Prioritize work with the Cybersecurity Operations Head based onbusiness risk, implementation readiness, dependencies andavailable capacity.
• Provide technical guidance and mentoring to the CybersecurityAnalyst and coordinate delivery partners, while remaining anindividual contributor without formal people-managementresponsibility.
• Own administration, lifecycle management, integration, health monitoring and optimization of assigned cybersecurity platforms.
• Lead security log-source onboarding, telemetry validation and data-quality controls across cloud, endpoint, network, identity, email, application and infrastructure sources.
• Develop or oversee API, scripting, orchestration and workflow automation that reduces manual effort and improves response consistency.
• Maintain platform access governance, support procedures, technical standards, configuration baselines and service documentation.
• Lead PAM implementation and continuous improvement, including account discovery, vaulting, credential rotation, MFA, session controls, monitoring, JIT access and controlled vendor access.
• Partner with Infrastructure and application owners on onboarding privileged accounts, systems and legacy access use cases.

Qualifications:

• Graduate of IT or any IT-related field
• Minimum 7 years of hands-on cybersecurity, security engineering or closely related enterprise technology experience, with demonstrated technical leadership.
• Practical experience across several of the following: IAM/PAM, endpoint/EDR, MDM, DLP/Purview, email security, SIEM/telemetry, vulnerability management, cloud security, automation or security service edge.
• Experience delivering enterprise security implementations from requirements and design through testing, handover and operational improvement.
• Strong scripting, API, troubleshooting, documentation and stakeholder-management capability.
• Ability to lead through influence across Infrastructure, Cloud, Applications, Risk, Compliance, vendors and business stakeholders.
• Working knowledge of NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and Zero Trust principles.
• Strong analytical thinking and structured problem solving.
• Ownership mindset with the ability to drive outcomes independently.
• Clear communication with technical and nontechnical stakeholders.
• Ability to manage competing priorities in a dynamic environment.
• Continuous improvement mindset and willingness to challenge inefficient processes.
• High attention to detail, documentation quality, and operational discipline.
• Security platform engineering, configuration, optimization, and lifecycle management.
• Vulnerability management, exposure management, and cyber risk prioritization.
• Security monitoring, telemetry onboarding, observability, and data quality management.
• Security automation, orchestration, scripting, and workflow optimization.
• API development, systems integration, and security technology interoperability.
• Cloud security concepts and common cloud platform security controls.
• Security architecture principles, secure design patterns, and operational control requirements.
• Technical documentation, runbook development, standards creation, and stakeholder communication.

____________

About CITADEL Pacific

CITADEL Pacific Ltd. (CPL) is a diversified private holding company with operations in the Philippines, Hong Kong, Macau, the Republic of Palau, the Commonwealth of the Northern Mariana Islands, and the US Territory of Guam.

Our holdings range from controlling stakes in companies engaged in telecommunications, retail, petroleum and gas distribution, commercial, and industrial property, in-flight catering, and manpower services. Recent acquisitions entering Solar and Data Center businesses position CITADEL to future facing and fast-growing industries in renewables energy and digital infrastructure. Our recent acquisitions of Solar and Data Center businesses position CITADEL in future-facing, fast-growing industries within the renewable energy and digital infrastructure sectors.

We offer a competitive total rewards package which includes a base salary determined by factors such as role, experience, skill set, and location. Additionally, eligible employees may receive discretionary bonuses based on both company performance and individual achievements. Our benefits and programs are designed to meet the needs of our employees and are benchmarked to the market. Detailed information regarding compensation and benefits will be shared during the hiring process.