Senior Security Operations Engineer
Summary
Senior security operations engineer owning detection engineering, SIEM/SOAR use cases, threat intel, incident response, and security automation in Azure-heavy and hybrid cloud environments, using Microsoft Sentinel, Defender XDR, Intune, Nessus/Qualys, AWS security services, and PowerShell. Remote full-time for Philippines-based candidates with flexible nightshift availability.
Salary: ₱90,000 – ₱120,000 per month
What We Look For
Must Have
Availability to work on nightshift schedules (flexible)
4+ years in security operations or cybersecurity engineering with a heavy focus on Azure security solutions
Hands-on mastery of the Microsoft security stack: Azure AD, Microsoft Sentinel, Defender for Endpoint/Identity/Cloud Apps, Intune, and Windows Server hardening
Proven experience authoring and operationalizing SIEM use cases and SOAR playbooks, building and tuning them
Familiarity with vulnerability scanning tools such as Nessus or Qualys, with experience driving remediation workflows with asset owners
Strong background with EDR, firewalls, IDS/IPS, vulnerability scanners, and encryption protocols
Proficiency in PowerShell scripting; working knowledge of AWS security services including GuardDuty, Security Hub, and IAM
Experience with threat intelligence platforms and operationalizing CTI feeds into detection and response workflows
Strong Advantage
Certifications such as CISSP, CISM, CCSP, AZ-500, MS-500, or ISO 27001 Lead Implementer/Auditor
Experience guiding organizations through ISO 27001 and/or SOC 2 readiness and audits
Experience with PCI-DSS, GDPR, or HIPAA compliance frameworks
Experience with Cloudflare OR WAF
Background in DevSecOps pipelines and infrastructure-as-code security scanning
Solid background in Cloud Security Posture Management (CSPM), ideally via Defender for Cloud or a comparable platform
Experience conducting forensic investigations across Azure or AWS environments, including evidence collection for legal or compliance proceedings
Nice to Have
Python or Bash scripting alongside PowerShell
Exposure to fraud-detection tooling and eCommerce security analytics
Working knowledge of ITIL practices and secure SDLC principles
Tools and Platforms We Work With
Experience with any of these is a strong advantage. You do not need all of them.
Microsoft Sentinel · Defender XDR · Azure AD · Nessus / Qualys · Defender for Cloud · Azure Security Center · AWS GuardDuty / Security Hub · Intune · PowerShell · SOAR Playbooks
Why Join Us
Work on high-impact enterprise security programs across Azure-heavy and hybrid cloud environments
Exposure to enterprise compliance programs across global client organizations, including ISO 27001 and SOC 2 environments
Hands-on ownership of detection engineering, threat intelligence operations, incident response, and security automation with modern tooling
Opportunity to mentor and lead within a technically rigorous, security-first team culture
Remote, full-time setup for Philippines-based candidates
Skills
- Analytics
- Automation
- AWS
- Azure
- Azure AD
- Bash
- Cism
- Cissp
- Cloud
- Cloud Security
- Cloudflare
- CSPM
- Cybersecurity
- DevSecOps
- E-commerce
- EDR
- Firewall
- Gdpr
- Hipaa
- IAM
- Infrastructure as Code
- Intune
- ISO 27001
- ITIL
- Microsoft Sentinel
- Nessus
- Pci Dss
- PowerShell
- Python
- Qualys
- SDLC
- SIEM
- SOC 2
- Threat Intelligence
- Vulnerability Scanning
- WAF
- Windows Server
- XDR