SOC Operations Engineer – Threat Detection & IR

DataOne; Davao City; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

DataOne in Davao City, Philippines, is expanding its security operations to focus on threat detection, incident response, and security infrastructure management. You will work in a follow-the-sun SOC environment, collaborating with the global team to deliver audit-ready evidence for governance and compliance teams.

As a SOC Engineer, you will tune Wazuh for central logging and security monitoring, coordinate with IT and Compliance, and help implement Zero Trust concepts using modern tooling.

Qualifications

• 2–3 years in a SOC/Infrastructure Security role
• Professional fluency in English (written and spoken)
• Datacenter/enterprise security experience
• Strong collaboration with non-technical teams (Compliance/Legal)

Responsibilities

• Core focus on threat detection, incident response, and security infrastructure engineering.
• Audit & Compliance Support: provide evidence, logs, and vulnerability reports for audits.
• SIEM & Log Management: tune and optimize Wazuh across group infrastructure.
• Endpoint Defense: manage Bitdefender GravityZone for endpoint protection and isolation.
• Perimeter & Network Security: configure Fortinet devices and monitor IDS/IPS systems.
• Zero Trust Architecture: administer secure remote access with NetBird and WireGuard.
• Incident Response & Automation: orchestrate IR workflows and enrichment using TheHive and Cortex.
• Threat Intelligence & Vulnerability Management: aggregate IoCs via MISP, Shadowserver, and SOCRadar; CVE tracking via OpenVAS.
• Active Directory Auditing: risk scoring and mapping attack paths with BloodHound and PingCastle.
• Data Protection: assist in evaluating potential DLP solutions across DataOne and BSO systems.

Skills

Threat detection

Incident response

Security infrastructure

Tools

Fortinet FortiGate

FortiWAF

NetBird

WireGuard

TheHive

Cortex

OpenVAS

VulnTracker

BloodHound

PingCastle

Suricata

Job description

DataOne in Davao City, Philippines, is expanding its security operations to focus on threat detection, incident response, and security infrastructure management. You will work in a follow-the-sun SOC environment, collaborating with the global team to deliver audit-ready evidence for governance and compliance teams.

As a SOC Engineer, you will tune Wazuh for central logging and security monitoring, coordinate with IT and Compliance, and help implement Zero Trust concepts using modern tooling.