URGENT HIRING: Security Engineer (MSP SOC) – Night Shift | BGC Hybrid

Goodman Tech BPO OPC; Taguig; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Goodman Tech BPO OPC is seeking an experienced security operations professional to manage offshore security for a North American MSP. You will handle threat triage, incident response, identity and endpoint hardening, vulnerability management, and audit evidence creation across multiple client environments.

You will own security uplift projects, map controls to standards, and deliver evidence packs for client leadership.

Qualifications

• 5+ years in security operations, MSP/MSSP experience preferred.
• Phishing investigations and endpoint containment.
• Hands-on with Microsoft security stack: Defender, Entra ID, Sentinel.
• Experience with EDR/MDR, DNS and web filtering, firewall logs.
• Compliance and audit delivery against ISO/IEC 27001/NIST CSF.
• Track record delivering uplift/remediation projects for clients.

Responsibilities

• Lead security uplift and audit remediation projects.
• Triage incidents and respond to alerts across clients.
• Produce evidence packs and findings reports for leadership.
• Develop uplift roadmaps: config work vs licensing budgets.
• Perform backups verification and phishing simulations.

Skills

Security operations

Incident triage

Microsoft security stack

EDR/MDR

Vulnerability management

Compliance & audit

Technical writing

Tools

Microsoft Defender

Entra ID

Microsoft Sentinel

SIEM tooling

Job description

About the role

We’re filling a dedicated offshore security seat for a North American managed services provider. You’ll run day-to-day security operations across multiple client environments: alert triage and incident response, identity and endpoint hardening, vulnerability management, and the compliance and audit evidence clients rely on. You’ll investigate an alert at 9pm and write the risk register entry for it the next morning.

Alongside operations, you’ll deliver client cybersecurity projects focused on security uplift and compliance.

We want someone who’ll own this seat for the long term.

Security uplift and compliance projects

• Working through third-party cybersecurity audit findings and maturity assessments, item by item, to closure
• Checking audit register status against real platform evidence and correcting items that are reported wrong
• Building uplift roadmaps that separate configuration work from licensing and budget decisions
• Identity hardening: Conditional Access and MFA enforcement, privileged access, access reviews, guest account cleanup
• Remediating end-of-life systems, verifying backups and restore readiness, and running phishing simulation programmes
• Producing evidence packs and findings reports for client leadership

Schedule and setup

• Night shift (Manila time)
• First month fully onsite in BGC for onboarding, then hybrid with Monday and Tuesday onsite
• On standby for after-hours incidents, with a standby allowance on top of salary

Requirements

• 5+ years in security operations, including at least 2 years at an MSP or MSSP supporting multiple clients
• Incident triage and response: phishing and email security investigations, account compromise, endpoint containment and remediation
• Hands‑on with the Microsoft security stack: Defender, Entra ID (Conditional Access, MFA, Identity Protection, PIM) and Microsoft Sentinel or a comparable SIEM
• Production experience with EDR/MDR, DNS and web filtering, and firewall log review
• Vulnerability management: scanning, prioritisation and tracking remediation to closure
• Compliance and audit delivery against ISO/IEC 27001, NIST CSF or similar: control mapping, policy writing, risk registers and evidence packs
• Track record of delivering security uplift or audit remediation projects for clients, from findings through to verified closure
• Security hardening and backup security posture reviews
• Clear written English. You’ll write client-facing findings and reports
• Nice to have: Security+, SC-200, CySA+ or equivalent, and VAPT experience