Role Overview

The Senior Cyber Security Engineer has the remit of proactively driving development of the cyber security capability in line with the evolving threat landscape. This includes; vulnerability management, access control, security platform engineering, detection and response activities.

Role Responsibilities

Security platform engineering and projects
Vulnerability identification and remediation
Privileged access management
Maintain current tooling operating effectiveness
Identify areas for improvement within current tooling
Proactively identify opportunities for control improvements
Develop strong relationships with stakeholders across the business
Provide security tooling metrics
Review and provide security input on architecture design briefs and technical solution documents
Collaborate with solution architects to ensure security is embedded in system and cloud designs
Penetration test report remediation
Define and validate security controls across cloud environments, particularly AWS
Maintain awareness of cloud security architecture best practices and emerging technologies
Support the development and implementation of secure-by-design principles across projects
Maintain knowledge of current ATP TTPs
Maintain knowledge of security tool landscape

Experience / Competences

Required

5 to 8 years of Cybersecurity experience.
Broad Cybersecurity Engineering Background: Deep technical exposure across multiple security domains rather than administration of a single tool.
Experience implementing vulnerability management, SIEM, PAM, IDS/IPS, EDR, DLP, CNAPP and AV platforms
Intermediate level knowledge of incident response processes for OS and network level events
Comfortable with Windows and Linux operating systems
Solid knowledge of networking, active directory and web applications
Demonstrated ability to write automation scripts (Python, PowerShell, Bash) from scratch to solve complex enterprise problems, without reliance on AI or pre-written templates.
Experience with reviewing and implementing Cloud security controls
Experience reviewing architecture design documents and identifying security risks
Strong understanding of AWS security services and controls (e.g., IAM, Guard Duty, SCPs, KMS)
Proven ability to act autonomously during critical incidents, including troubleshooting complex issues without standard playbooks.
Strong executive communication skills, with the ability to translate technical P1/P0 security incidents into clear business risks for non-technical stakeholders.
Familiarity with cloud-native security frameworks and reference architectures

Nice-to-Have

Previous leadership or mentoring experience is beneficial but not required
Highly advantageous to have direct engineering experience with CrowdStrike (EDR/XDR) and/or Fortinet (Network Security/Firewalls).
Incident response and forensics
Degree level accreditation or equivalent experience
OSCP, CEH or SANS certification
Experience with threat modelling and secure design principles

Work Setup:

Location: Bonifacio Global City, Taguig
Type: Full time, Permanent
Shift: Mid shift aligned with EMEA timezone
Onboarding: First month fully onsite; then hybrid 3 days onsite per week