About SM Investments
At SM Investments, we shape sustainable growth stories that move industries and uplift communities. As one of the Philippines leading conglomerates, we build opportunities across retail, banking, and property guided by excellence, integrity, and innovation.
About the Role
We are seeking a Cybersecurity Engineer to support the implementation, administration, and continuous improvement of security technologies and controls across our enterprise environment. This role focuses on securing infrastructure, monitoring threats, automating security processes, and collaborating with technology teams to strengthen the organization's cybersecurity posture.
Key Responsibilities
- Design, implement, configure, and maintain cybersecurity solutions across on-premises, cloud, and hybrid environments.
- Administer and optimize security technologies, including firewalls, web application firewalls (WAF), endpoint protection platforms, privileged access management (PAM), identity security solutions, email security solutions, secure access solutions, and cloud security platforms.
- Support the deployment, administration, and continuous improvement of SIEM, SOAR, EDR/XDR, vulnerability management, cloud security, and security monitoring platforms.
- Monitor security events, investigate alerts, and assist with incident response and remediation activities.
- Conduct security assessments, vulnerability reviews, baseline configuration validations, and control effectiveness testing to identify and mitigate risks.
- Develop and maintain automation scripts, integrations, and workflows using orchestration platforms to improve operational efficiency.
- Collaborate with IT, infrastructure, cloud, application, and SOC teams to implement cybersecurity best practices and controls.
- Document security configurations, procedures, technical standards, and operational processes.
- Participate in security projects and contribute to the enhancement of the organization's cybersecurity capabilities.
Qualifications
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Computer Engineering, or a related discipline.
- Experience managing enterprise-scale cybersecurity platforms and driving security transformation initiatives.
- Hands-on experience with security technologies such as firewalls, endpoint detection and response (EDR), SIEM, identity and access management (IAM), vulnerability management, and cloud security platforms.
- Familiarity with cloud environments such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP).
- Experience with scripting and automation using Python, PowerShell, APIs, or similar technologies.
- Strong understanding of cybersecurity frameworks, security best practices, and common attack techniques.
- Strong analytical and troubleshooting skills, with the ability to investigate and resolve security issues.
- Excellent stakeholder management and communication skills, with the ability to translate technical issues into business-relevant recommendations.
- Ability to work collaboratively with cross-functional teams.
- Ability to work effectively in a fast-paced enterprise environment and manage multiple priorities simultaneously.
- Relevant certifications such as CompTIA Security+, CySA+, SSCP, Microsoft Security, AWS Security, or equivalent certifications are an advantage.
