Senior Security Engineer

CITADEL; Taguig; On-site; PHP 1,400,000 - 2,200,000; Full time

Benefits offered by this job

Discretionary bonuses

Competitive total rewards

Performance bonus

Job summary

CITADEL Pacific is seeking a Senior Security Engineer in the Philippines to lead the design and delivery of priority cybersecurity controls. You will own technical strategy for security platforms, identity and access management, data protection, and cloud security, while coordinating with cross-functional teams.

You will guide implementation, maintain operational excellence, and mentor analysts as an individual contributor.

Qualifications

• Graduate of IT or any IT-related field.
• Minimum 7 years of hands-on cybersecurity, security engineering or closely related enterprise technology experience, with demonstrated technical leadership.
• Experience across IAM/PAM, endpoint/EDR, MDM, DLP/Purview, email security, SIEM/telemetry, vulnerability management, cloud security, automation or security service edge.
• Experience delivering enterprise security implementations from requirements and design through testing, handover and operational improvement.
• Strong scripting, API, troubleshooting, documentation and stakeholder-management capability.
• Ability to lead through influence across Infrastructure, Cloud, Applications, Risk, Compliance, vendors and business stakeholders.
• Working knowledge of NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and Zero Trust principles.
• Strong analytical thinking and structured problem solving.
• Ownership mindset with the ability to drive outcomes independently.
• Clear communication with technical and nontechnical stakeholders.
• Ability to manage competing priorities in a dynamic environment.
• Continuous improvement mindset and willingness to challenge inefficient processes.
• High attention to detail, documentation quality, and operational discipline.
• Security platform engineering, configuration, optimization, and lifecycle management.
• Vulnerability management, exposure management, and cyber risk prioritization.
• Security monitoring, telemetry onboarding, observability, and data quality management.
• Security automation, orchestration, scripting, and workflow optimization.
• API development, systems integration, and security technology interoperability.
• Cloud security concepts and common cloud platform security controls.
• Security architecture principles, secure design patterns, and operational control requirements.
• Technical documentation, runbook development, standards creation, and stakeholder communication.

Responsibilities

• Lead technical planning and delivery across PAM, DLP, MDM, Secure Email Gateway, SSE, Vulnerability and Exposure management, security monitoring, automation.
• Convert roadmap outcomes into requirements, designs, implementation plans, acceptance criteria, runbooks, metrics and operational handover.
• Prioritize work with the Cybersecurity Operations Head based on business risk, implementation readiness, dependencies and available capacity.
• Provide technical guidance to the Cybersecurity Analyst and coordinate delivery partners.
• Own administration, lifecycle management, integration, health monitoring and optimization of assigned cybersecurity platforms.
• Lead security log-source onboarding, telemetry validation and data-quality controls across cloud, endpoint, network, identity, email, application and infrastructure sources.
• Develop or oversee API, scripting, orchestration and workflow automation that reduces manual effort and improves response consistency.
• Maintain platform access governance, support procedures, technical standards, configuration baselines and service documentation.
• Lead PAM implementation and continuous improvement, including account discovery, vaulting, credential rotation, MFA, session controls, monitoring, JIT access and controlled vendor access.
• Partner with Infrastructure and application owners on onboarding privileged accounts, systems and legacy access use cases.

Skills

IAM/PAM

EDR/endpoint security

DLP

SIEM/telemetry

Cloud security

Automation

API scripting

Secure Email Gateway

Vulnerability management

Zero Trust

Education

Bachelor's degree in IT or related field

Tools

SIEM platforms

PAM tools

EDR tooling

Automation scripts

Job description

The Senior Security Engineer serves as the cybersecurity team's technical lead for the design, implementation, integration, and continuous improvement of priority cybersecurity controls. The role leads technical delivery of the security roadmap across security platforms, identity and privileged access, endpoint and device security, data protection, email security, vulnerability and exposure management, security telemetry, and automation. It provides technical direction, drives cross-functional implementation, and ensures security solutions are effectively integrated, operationalized, and continuously improved, while remaining an individual contributor without formal people-management responsibility.

Job Responsibilities

The role serves as the primary technical owner for enterprise security platforms, vulnerability and exposuremanagement capabilities, security telemetry, integrations, orchestration, automation, and security monitoring infrastructure. Domain-specific security engineers are responsible for defining control requirements,detection use cases, and operational outcomes within their respective technology domains.

The role is expected to provide engineering ownership, operational oversight, and continuous improvementacross the following cybersecurity domains:

• Security platforms and security operations technologies
• Vulnerability management, exposure management, and attack surface reduction
• Security telemetry, visibility, observability, and data quality
• Security integrations, automation, orchestration, and API-enabled workflows
• Security monitoring, analytics, detection engineering support, reporting platforms, and telemetrymanagement.
• Security service edge and related cloud-delivered security technologies

• Lead technical planning and delivery across PAM, DLP, MDM,Secure Email Gateway, SSE, Vulnerability and Exposuremanagement, security monitoring, automation and MDR/MSOCintegration.
• Convert roadmap outcomes into requirements, designs,implementation plans, acceptance criteria, runbooks, metrics andoperational handover.
• Prioritize work with the Cybersecurity Operations Head based onbusiness risk, implementation readiness, dependencies andavailable capacity.
• Provide technical guidance and mentoring to the CybersecurityAnalyst and coordinate delivery partners, while remaining anindividual contributor without formal people-managementresponsibility.
• Own administration, lifecycle management, integration, healthmonitoring and optimization of assigned cybersecurity platforms.
• Lead security log-source onboarding, telemetry validation and data-quality controls across cloud, endpoint, network, identity, email, application and infrastructure sources.
• Develop or oversee API, scripting, orchestration and workflow automation that reduces manual effort and improves response consistency.
• Maintain platform access governance, support procedures, technical standards, configuration baselines and service documentation.
• Lead PAM implementation and continuous improvement,including account discovery, vaulting, credential rotation, MFA, session controls, monitoring, JIT access and controlled vendor access.
• Partner with Infrastructure and application owners on onboarding privileged accounts, systems and legacy access use cases.

Qualifications

• -Graduate of IT or a ny IT-related field
• - Minimum 7 years of hands-on cybersecurity, security engineering or closely related enterprise technology experience, with demonstrated technical leadership.
• - Practical experience across several of the following: IAM/PAM, endpoint/EDR, MDM, DLP/Purview, email security, SIEM/telemetry, vulnerability management, cloud security, automation or security service edge.
• - Experience delivering enterprise security implementations from requirements and design through testing, handover and operational improvement.
• - Strong scripting, API, troubleshooting, documentation and stakeholder-management capability.
• - Ability to lead through influence across Infrastructure, Cloud, Applications, Risk, Compliance, vendors and business stakeholders.
• - Working knowledge of NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and Zero Trust principles.
• - Strong analytical thinking and structured problem solving.
• - Ownership mindset with the ability to drive outcomes independently.
• - Clear communication with technical and nontechnical stakeholders.
• - Ability to manage competing priorities in a dynamic environment.
• - Continuous improvement mindset and willingness to challenge inefficient processes.
• - High attention to detail, documentation quality, and operational discipline.
• - Security platform engineering, configuration, optimization, and lifecycle management.
• - Vulnerability management, exposure management, and cyber risk prioritization.
• - Security monitoring, telemetry onboarding, observability, and data quality management.
• - Security automation, orchestration, scripting, and workflow optimization.
• - API development, systems integration, and security technology interoperability.
• - Cloud security concepts and common cloud platform security controls.
• - Security architecture principles, secure design patterns, and operational control requirements.
• - Technical documentation, runbook development, standards creation, and stakeholder communication.

About CITADEL Pacific

CITADEL Pacific Ltd. (CPL) is a diversified private holding company with operations in the Philippines, Hong Kong, Macau, the Republic of Palau, the Commonwealth of the Northern Mariana Islands, and the US Territory of Guam.

Our holdings range from controlling stakes in companies engaged in telecommunications, retail, petroleum and gas distribution, commercial, and industrial property, in-flight catering, and manpower services. Recent acquisitions entering Solar and Data Center businesses position CITADEL to future facing and fast-growing industries in renewables energy and digital infrastructure. Our recent acquisitions of Solar and Data Center businesses position CITADEL in future-facing, fast-growing industries within the renewable energy and digital infrastructure sectors.

We offer a competitive total rewards package which includes a base salary determined by factors such as role, experience, skill set, and location. Additionally, eligible employees may receive discretionary bonuses based on both company performance and individual achievements. Our benefits and programs are designed to meet the needs of our employees and are benchmarked to the market. Detailed information regarding compensation and benefits will be shared during the hiring process.