Senior Security Platform Engineer - IAM, PAM & Telemetry

CITADEL PACIFIC, LTD. - ROHQ; Taguig; Hybrid; PHP 2,000,000 - 3,600,000; Full time

Job summary

CITADEL Pacific Ltd. (CPL) is seeking a Senior Security Engineer to lead design, implementation, and continuous improvement of priority cybersecurity controls across identity, endpoint, data protection, email security, and vulnerability management.

The role combines technical leadership with hands-on delivery while remaining an individual contributor. The position emphasizes cross-functional collaboration, security telemetry, and automation, with a focus on delivering robust security operations

Qualifications

• Graduate of IT or any IT-related field.
• Minimum 7 years of hands-on cybersecurity, security engineering or closely related enterprise technology experience, with demonstrated technical leadership.
• Practical experience across several: IAM/PAM, endpoint/EDR, MDM, DLP/Purview, email security, SIEM/telemetry, vulnerability management, cloud security, automation or security service edge.
• Experience delivering enterprise security implementations from requirements and design through testing, handover and operational improvement.
• Strong scripting, API, troubleshooting, documentation and stakeholder-management capability.
• Ability to lead through influence across Infrastructure, Cloud, Applications, Risk, Compliance, vendors and business stakeholders.
• Working knowledge of NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls and Zero Trust principles.
• Strong analytical thinking and structured problem solving.
• Ownership mindset with the ability to drive outcomes independently.
• Clear communication with technical and nontechnical stakeholders.
• Ability to manage competing priorities in a dynamic environment.
• Continuous improvement mindset and willingness to challenge inefficient processes.
• High attention to detail, documentation quality, and operational discipline.
• Security platform engineering, configuration, optimization, and lifecycle management.
• Vulnerability management, exposure management, and cyber risk prioritization.
• Security monitoring, telemetry onboarding, observability, and data quality management.
• Security automation, orchestration, scripting, and workflow optimization.
• API development, systems integration, and security technology interoperability.
• Cloud security concepts and common cloud platform security controls.
• Security architecture principles, secure design patterns, and operational control requirements.
• Technical documentation, runbook development, standards creation, and stakeholder communication.

Responsibilities

• Lead technical planning and delivery across PAM, DLP, MDM,Secure Email Gateway, SSE, Vulnerability and Exposuremanagement, security monitoring, automation and MDR/MSOCintegration.
• Convert roadmap outcomes into requirements, designs,implementation plans, acceptance criteria, runbooks, metrics andoperational handover.
• Prioritize work with the Cybersecurity Operations Head based onbusiness risk, implementation readiness, dependencies andavailable capacity.
• Provide technical guidance and mentoring to the CybersecurityAnalyst and coordinate delivery partners, while remaining anindividual contributor without formal people-managementresponsibility.
• Own administration, lifecycle management, integration, healthmonitoring and optimization of assigned cybersecurity platforms.
• Lead security log-source onboarding, telemetry validation and data-quality controls across cloud, endpoint, network, identity, email, application and infrastructure sources.
• Develop or oversee API, scripting, orchestration and workflow automation that reduces manual effort and improves response consistency.
• Maintain platform access governance, support procedures, technical standards, configuration baselines and service documentation.
• Lead PAM implementation and continuous improvement,including account discovery, vaulting, credential rotation, MFA, session controls, monitoring, JIT access and controlled vendor access.
• Partner with Infrastructure and application owners on onboarding privileged accounts, systems and legacy access use cases.

Skills

IAM/PAM

EDR

SIEM

Cloud security

Scripting/API

Vulnerability management

Education

IT-related degree

Job description

CITADEL Pacific Ltd. (CPL) is seeking a Senior Security Engineer to lead design, implementation, and continuous improvement of priority cybersecurity controls across identity, endpoint, data protection, email security, and vulnerability management.

The role combines technical leadership with hands-on delivery while remaining an individual contributor. The position emphasizes cross-functional collaboration, security telemetry, and automation, with a focus on delivering robust security operations