Senior Security Engineer – Threat & Incident Response

PDAX; Pasig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

PDAX is seeking a Security Operations professional to enhance threat detection and incident response across endpoints, networks, and cloud environments. You will design playbooks, align with MSOC workflows, and lead defensive engineering efforts to improve posture.

Required are 3–5+ years in security operations, hands-on incident response, and experience with MSOC providers; knowledge of MITRE ATT&CK and scripting is highly valued.

Qualifications

• 3–5+ years in Security Operations, Blue Team, or Incident Response.
• Hands-on experience responding to real-world cyber attacks.
• Proven experience with MSOC providers and incident response playbooks.
• Experience designing incident response playbooks and leading VAPT exercises.

Responsibilities

• Operate and improve SIEM, EDR/XDR, and cloud security monitoring.
• Develop detection use cases mapped to MITRE ATT&CK.
• Lead and support incident response for malware, phishing, account takeover, data exfiltration, ransomware, DDoS, and cloud attacks.
• Design and maintain incident response playbooks for high-impact scenarios.
• Align playbooks with tooling and MSOC workflows.
• Conduct tabletop exercises to validate readiness.
• Act as security engineering lead for Managed Security Operations (MSOC).
• Ensure logs, telemetry, and monitoring across endpoints, networks, cloud, and identity.
• Define alert thresholds, escalation criteria, and communication channels.

Skills

SIEM

EDR/XDR

MITRE ATT&CK

Incident Response

MSOC

Cloud security

Python

Tools

SIEM tools

EDR/XDR tools

VAPT tools

Job description

PDAX is seeking a Security Operations professional to enhance threat detection and incident response across endpoints, networks, and cloud environments. You will design playbooks, align with MSOC workflows, and lead defensive engineering efforts to improve posture.

Required are 3–5+ years in security operations, hands-on incident response, and experience with MSOC providers; knowledge of MITRE ATT&CK and scripting is highly valued.