Senior Security Operations Engineer

yGen Innovations Inc; Metro Manila; Remote; PHP 1,200,000 - 1,800,000; Full time

Job summary

yGen Innovations Inc is seeking a security-focused professional to join a nightshift-capable, Azure-centric security operations team. The role emphasizes hands-on defense across Azure AD, Defender suites, SIEM/SOAR, and remediation workflows within a security-first culture.

The candidate will work on cloud security, threat intel integration, and incident response for global clients, with remote, full-time opportunities for candidates in the Philippines.

Qualifications

• 4+ years in security operations or cybersecurity engineering with strong Azure security focus.
• Hands-on mastery of the Microsoft security stack (Azure AD, Defender suites, Sentinel).
• Experience authoring and operationalizing SIEM use cases and SOAR playbooks.
• Familiarity with vulnerability scanning tools (Nessus/Qualys) and remediation workflows.
• Strong background with EDR, firewalls, IDS/IPS, and encryption protocols.
• PowerShell scripting proficiency; knowledge of AWS security services (GuardDuty, Security Hub, IAM).
• Experience with threat intel platforms and CTI feeds in detection/response.

Skills

Security operations

Azure security

PowerShell scripting

Threat intelligence

CTI workflows

Cloud security engineering

Compliance & policy frameworks

Incident response

Networking basics (IDS/IPS, Firewalls)

Cloud platforms (Azure/AWS)

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Identity

Microsoft Defender for Cloud Apps

Azure AD

Microsoft Sentinel

Intune

Windows Server hardening

Nessus

Qualys

GuardDuty

Security Hub

Cloudflare WAF

Job description

What We Look For

Must Have

• Availability to work on nightshift schedules (flexible)

• 4+ years in security operations or cybersecurity engineering with a heavy focus on Azure security solutions

• Hands-on mastery of the Microsoft security stack: Azure AD, Microsoft Sentinel, Defender for Endpoint/Identity/Cloud Apps, Intune, and Windows Server hardening

• Proven experience authoring and operationalizing SIEM use cases and SOAR playbooks, building and tuning them

• Familiarity with vulnerability scanning tools such as Nessus or Qualys, with experience driving remediation workflows with asset owners

• Strong background with EDR, firewalls, IDS/IPS, vulnerability scanners, and encryption protocols

• Proficiency in PowerShell scripting; working knowledge of AWS security services including GuardDuty, Security Hub, and IAM

• Experience with threat intelligence platforms and operationalizing CTI feeds into detection and response workflows

• FamiliaritywithCompliance,Audit,andPolicyframeworks

Strong Advantage

• Certifications such as CISSP, CISM, CCSP, AZ-500, MS-500, or ISO 27001 Lead Implementer/Auditor

• Experience guiding organizations through ISO 27001 and/or SOC 2 readiness and audits

• Experience with PCI-DSS, GDPR, or HIPAA compliance frameworks

• ExperiencewithCloudflareORWAF

• Background in DevSecOps pipelines and infrastructure-as-code security scanning

• Solid background in Cloud Security Posture Management (CSPM), ideally via Defender for Cloud or a comparable platform

• Experience conducting forensic investigations across Azure or AWS environments, including evidence collection for legal or compliance proceedings

Nice to Have

• Python or Bash scripting alongside PowerShell

• Exposure to fraud-detection tooling and eCommerce security analytics

• Working knowledge of ITIL practices and secure SDLC principles

Tools and Platforms We Work With

Experience with any of these is a strong advantage. You do not need all of them.

Microsoft Sentinel Defender XDR Azure AD Nessus / Qualys Defender for Cloud Azure Security Center AWS GuardDuty / Security Hub Intune PowerShell SOAR Playbooks

Why Join Us

• Work on high-impact enterprise security programs across Azure-heavy and hybrid cloud environments

• Exposure to enterprise compliance programs across global client organizations, including ISO 27001 and SOC 2 environments

• Hands-on ownership of detection engineering, threat intelligence operations, incident response, and security automation with modern tooling

• Opportunity to mentor and lead within a technically rigorous, security-first team culture

• Remote, full-time setup for Philippines-based candidates