SOC Engineer: Threat Detection & Incident Response

Dataone; Davao City; On-site; PHP 700,000 - 900,000; Full time

Job summary

Dataone is expanding its global security capabilities to deliver expert-level security operations across DATAONE and BSO systems. A follow-the-sun SOC team based in Casablanca and Davao focuses on detection, response, and security infrastructure management under the SOC Manager.

You will enable governance by providing technical evidence and reports for audits, while also handling SIEM, EDR, and threat intel tooling to protect critical assets.

Qualifications

• 2–3 years of experience in a SOC Engineering, Systems Engineering, or Infrastructure Security role.
• Professional fluency in English (written and spoken) is mandatory for collaboration across global sites and generating technical audit data.
• Datacenter/enterprise security experience securing data centers, cloud infrastructure, or large-scale networks is highly valued.
• Proven ability to work with non-technical teams (e.g., Compliance and Legal) to deliver clear, actionable data.

Responsibilities

• Threat detection, incident response, and security infrastructure engineering focused on continuous operations.
• Audit and compliance support: gather, organize, and provide technical evidence, log extracts, and vulnerability reports for audits.
• Maintain, tune, and optimize Wazuh for central logging, FIM, and HIDS across Group infrastructure.
• Manage and deploy Bitdefender GravityZone for endpoint protection and automated host isolation during incidents.
• Configure and monitor Fortinet NGFW/WAF for perimeter defense and web app security; manage Suricata-based IDS/IPS.
• Administer Zero Trust access using NetBird and WireGuard.
• Orchestrate incident response workflows and automation using TheHive and Cortex.
• Aggregate IoCs via MISP, Shadowserver, and SOCRadar; conduct CVE tracking with OpenVAS and VulnTracker.
• Perform Active Directory auditing with BloodHound and PingCastle and coordinate follow-up actions with AD admins.
• Assist in evaluating a future Data Loss Prevention (DLP) solution to protect sensitive data.

Skills

SOC Engineering

Incident Response

Threat Detection

Security Infrastructure

Collaboration

English Communication

Tools

Wazuh

Bitdefender GravityZone

Fortinet FortiGate

FortiWAF

NetBird

WireGuard

TheHive

Cortex

MISP

Shadowserver

SOCRadar

OpenVAS

VulnTracker

BloodHound

PingCastle

Suricata

Job description

Dataone is expanding its global security capabilities to deliver expert-level security operations across DATAONE and BSO systems. A follow-the-sun SOC team based in Casablanca and Davao focuses on detection, response, and security infrastructure management under the SOC Manager.

You will enable governance by providing technical evidence and reports for audits, while also handling SIEM, EDR, and threat intel tooling to protect critical assets.