Senior Cyber Security Engineer
- Compensation
- Not disclosed
- Location
- Quezon City, Metro Manila, Philippines
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- 6–10 years of hands-on experience in cybersecurity engineering, enterprise security or security operations.
- Proven ability to independently design, deploy, manage and improve production security controls.
- Strong experience in endpoint and mobile security, including Microsoft Intune, Entra ID and Defender.
- Hands-on knowledge of DLP, CASB, email security, DNS security and secure web access controls.
- Practical skills in incident investigation and response, SIEM detection engineering, vulnerability management and AWS security.
- Strong PowerShell and Bash scripting skills, working knowledge of Python, and experience using REST APIs for automation.
- Experience translating security standards and audit requirements into operational controls, ideally within regulated financial services and BSP requirements.
- Collaborative, accountable and calm under pressure, with clear communication skills and a willingness to mentor junior engineers.
- Degree in Cybersecurity, Computer Science, IT or a related field, or equivalent practical experience. Relevant certifications are an advantage.
- Based in Manila with hybrid working, regional collaboration and participation in an agreed on-call rotation.
Full description
About GoTyme
GoTyme is a joint venture between the Gokongwei Group, one of the biggest conglomerates in the Philippines, and the Singapore-headquartered digital banking group Tyme. This venture combines the trusted Gokongwei brand, customer base, and distribution ecosystem with Tyme’s globally proven digital banking technology and hands-on experience building South Africa’s leading digital bank, TymeBank, one of the fastest-growing digital banks in the world today.
At GoTyme, we have embarked on a journey to democratize financial services and bring next-level banking to the Philippines. We seek individuals who share our belief that the game is worth changing, to join our growing team of GoTymers as we build, launch, and scale a bank that empowers all Filipinos to navigate a path to financial freedom.
About the role
We are seeking a Senior Cyber Security Engineer to strengthen and mature security engineering and operations in the Philippines. This hands-on role covers endpoint, enterprise, identity and cloud security, protecting Windows, macOS and mobile devices. The role contributes to the Cyber Engineering Centre of Excellence for the GoTyme Group and supports BSP regulatory compliance.
The engineer will own assigned security platforms, respond to SOC escalations, develop detections and automation, and drive remediation with IT and Cloud teams. The successful candidate will work independently from the outset, maintain operational documentation and mentor junior engineers.
Endpoint and device security
- Design, deploy, configure and maintain endpoint protection agents and policies across Windows, macOS and mobile devices.
- Build device management packages and detection and remediation scripts. Manage pilot rollouts, upgrades and rollback with IT.
- Manage device compliance and security enforcement through endpoint management platforms. Reconcile inventories, close coverage gaps with IT, and verify agent health and policy enforcement.
- Engineer and maintain endpoint hardening baselines and encryption controls, monitor configuration drift and validate remediation.
Data loss prevention
- Design, deploy and tune endpoint data loss prevention (DLP) and Cloud Access Security Broker (CASB) controls with managed service providers to protect sensitive and regulated data.
- Troubleshoot DLP deployments and upgrades across operating systems and secure access controls.
- Investigate potential data loss, reduce false positives, manage user coaching and document policy exceptions for approval by the appropriate owner.
- Validate protection of sensitive data across endpoints and cloud applications, and provide control evidence and reporting for risk and regulatory purposes.