Cybersecurity Operations Engineer (SecOps)

Job Expectations:

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job:

We are looking for a SecOps Engineer Senior Associate to join our client's Cybersecurity team and help protect critical systems and sensitive data from evolving cyber threats. In this role, you will support security operations, investigate security incidents, monitor security platforms, and contribute to vulnerability management and threat detection initiatives. You will work closely with internal teams and clients to strengthen security controls, respond to incidents, and improve overall cybersecurity resilience.

Key Responsibilities:

• Monitor and investigate security events using SIEM, EDR, threat intelligence, and security monitoring platforms.
• Identify, analyze, and respond to cybersecurity incidents to minimize business impact and security risks.
• Perform threat hunting, root cause analysis, and deep-dive investigations of suspicious activities.
• Develop and maintain detection logic, correlation rules, and monitoring use cases to improve threat detection capabilities.
• Conduct vulnerability assessments, monitor remediation activities, and support vulnerability management programs.
• Perform daily health checks of security tools, scanners, asset discovery platforms, and security controls.
• Manage security incident tickets, remediation workflows, and inbound security communications.
• Collaborate with cybersecurity architects, engineers, and client stakeholders to resolve security issues and improve defenses.
• Maintain detailed documentation of incidents, operational activities, investigations, and platform changes.
• Support continuous improvement initiatives across Security Operations Center (SOC), Identity and Access Management (IAM), and Security Operations (SecOps) functions.

Qualifications:

• Bachelor's Degree in Computer Science, Information Technology, or a related field.
• 4+ years of solid experience in cybersecurity, security operations, incident response, or related areas.
• 3+ years of hands-on experience in SOC, SecOps, IAM, or Vulnerability Management environments.
• Strong experience with SIEM, EDR, Vulnerability Management, and IAM platforms.
• Experience creating detection logic, correlation rules, and conducting threat analysis.
• Knowledge of incident response, cyber threat intelligence, digital forensics, and network forensics.
• Strong analytical, troubleshooting, and problem-solving skills.
• GIAC (GCFA, GCIA, GCIH), Security+, CySA+, or equivalent cybersecurity certifications are an advantage.