Security Engineer

• Define, own and continually evolve the global internal IT and security strategy, ensuring alignment with business priorities, organisational growth and merger and acquisition activity.
• Lead the planning, integration and change management of acquired businesses into Beyond's technology estate, ensuring seamless transitions and minimal operational disruption.
• Oversee the design, implementation and continuous improvement of internal IT infrastructure, including SaaS platforms, end-user computing, collaboration technologies, networking and workplace technology.
• Develop, implement and maintain effective information security policies, governance frameworks and operational controls that protect company systems, data and intellectual property.
• Ensure compliance with relevant regulatory, contractual and certification requirements, including ISO 27001, ISO 9001, ISO/IEC 20000-1, ISO/IEC 42001, Cyber Essentials Plus, SOC 2 and data privacy (UK GDPR and equivalent regimes, including cross-border transfer governance), while leading audits, risk assessments and remediation activities.
• Lead the consolidation of separate legacy-entity certifications into a single group-wide Integrated Management System, while maintaining standalone certification for public-sector requirements.
• Own the global IT operating budget, vendor relationships and technology procurement, ensuring investment delivers value, scalability and operational efficiency.
• Lead business continuity, disaster recovery and incident response planning, regularly testing organisational resilience and driving continual improvement.
• Provide leadership for global IT operations and service delivery, ensuring reliable, responsive and high-quality support for employees across multiple international locations.
• Own the design and implementation of Data Transfer Agreements and Role-Based Access Control across delivery centres in the Philippines, Romania and Argentina.
• Act as the technical authority for customer security/compliance due diligence responses, ensuring consistent, accurate evidence across entities.
• Produce and maintain clear technical documentation, including high and low-level solution designs, architectural standards and operational procedures.
• Evaluate emerging technologies and recommend strategic improvements that enhance security, productivity and operational effectiveness.

Head of IT, Internal Security

• Monitor and maintain the security of SAP systems to ensure protection against cyber threats
• Identify, analyze, and respond to security incidents in a timely and effective manner to minimize organizational impact
• Collaborate with IT and business stakeholders to design and implement SAP security initiatives aligned with company policies and standards
• Support SAP audit-related activities to ensure compliance with regulatory and internal requirements

SAP Security Operator

• Design, implement, maintain, and support enterprise network infrastructure for multiple MSP clients.
• Configure, administer, and troubleshoot Cisco ASA, Cisco Firepower Threat Defense (FTD), and Fortinet FortiGate firewalls.
• Deploy and support Cisco Meraki SD-WAN solutions across distributed environments.
• Configure and troubleshoot BGP, MPLS, and advanced routing protocols.
• Manage MPLS VRF environments for secure network segmentation and connectivity.
• Configure and support Cisco Nexus switches, including Virtual Port Channel (vPC) technologies.
• Monitor network performance and proactively identify capacity or security issues.
• Perform advanced troubleshooting of LAN, WAN, VPN, wireless, firewall, and routing issues.
• Participate in infrastructure migrations, upgrades, and client onboarding projects.
• Respond to escalated incidents while meeting SLA requirements.
• Perform root cause analysis and implement long-term solutions.
• Create and maintain technical documentation, network diagrams, and standard operating procedures.
• Collaborate with Systems Engineers, Security Engineers, and client IT teams to deliver infrastructure improvements.
• Participate in an on-call rotation when required.

Senior Network and Security Engineer

• Responsible for the health, security, and optimization of Timeless Medical Systems’ digital and physical infrastructure.
• Manage cloud environments (AWS/Azure) and maintain high standards for data integrity and system uptime.
• Support the procurement, configuration, and deployment of all company hardware.
• Execute standardized hardware imaging and setup for new hires.
• Maintain an accurate asset database of all hardware.
• Manage secure retrieval and data sanitization of hardware from departing staff.
• Provision and manage user accounts across Microsoft 365, Google Workspace, and internal applications.
• Assist in the maintenance and monitoring of AWS and Azure environments.
• Deploy and manage endpoint protection, Multi-Factor Authentication (MFA), and VPN services.
• Maintain a rigorous schedule for OS and third-party application updates.
• Act as the primary point of contact for staff technical issues.
• Monitor and maintain office network infrastructure.
• Create and update internal 'How-To' guides for staff.

IT Specialist – Cyber Security Associate

• You will support or manage the full lifecycle of vendor, application, compliance, and security assessments, including launch and coordination.
• You will leverage your technical expertise to progress technical security assessments of new tools, applications and systems independently, including guiding end-to-end completion, developing pre and post implementation requirements, and managing exception requests.
• You must coordinate with internal stakeholders including IT, compliance, procurement, legal, and other relevant teams to ensure comprehensive coverage and clarity of requirements.
• You must maintain accurate documentation and reporting to facilitate transparency and informed decision-making.
• You must continuously identify opportunities for process improvement, efficiency gains, and enhanced accuracy of assessments.
• You will, at times, provide security consulting and influence adoption of security best practices.
• You may support information security and data privacy compliance audits and associated activities or if needed, support incident response.

Senior Cybersecurity Engineer, Security Assessment

• Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
• Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.
• Conduct testing in line with established methodologies and security frameworks (e.g., OWASP).
• Produce clear, structured reports outlining: Vulnerabilities and root cause, Business impact and risk rating, Practical remediation recommendations.
• Perform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.
• Support re-testing activities to validate remediation of identified issues.
• Support Red Team or adversary simulation exercises where required.
• Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths.
• Support documentation of attack paths and identified security gaps.
• Assist in controlled exploitation activities under guidance, including: Initial access techniques, Limited post-exploitation validation (e.g., privilege escalation concepts, lateral movement awareness).
• Collaborate with senior team members to understand real-world attacker behaviour and techniques.

Penetration Testing Analyst

• Security design & architect professional responsible for designing and implementing network security systems
• Manage deployment, configuration, and integration of various security controls
• Monitor network performance and security policies while optimizing user experiences
• Coordinate improvements with cross-functional teams

Senior Infrastructure Security Architect, Cyber Architecture, OT & Engineering, Zscaler

• Own the Microsoft Security Stack
• Manage and optimize Microsoft 365 Defender, Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, and Defender for Office 365
• Administer and tune Microsoft Sentinel - build and maintain KQL detection rules, analytics rules, workbooks, and playbooks
• Monitor the Microsoft Secure Score, prioritize improvement actions, and drive remediation across the tenant
• Configure and maintain Conditional Access policies, Microsoft Entra ID (Azure AD) security settings, and Privileged Identity Management (PIM)
• Monitor and respond to security alerts, incidents, and investigations across Defender XDR and Sentinel
• Develop and maintain incident response playbooks, automation workflows (Logic Apps / SOAR), and escalation procedures
• Perform threat hunting using KQL and identify gaps in detection coverage
• Conduct vulnerability assessments and lead remediation efforts in coordination with IT and engineering teams
• Evaluate and respond to identity-based threats, phishing campaigns, and anomalous behavior patterns
• Serve as a technical resource for SOC 2 Type 2 audit preparation and execution
• Design, implement, and document security controls that satisfy Trust Service Criteria (TSC) requirements across the company’s toolset
• Maintain evidence collection for audit deliverables - access reviews, logging configurations, policy enforcement, and change management records
• Identify control gaps and drive remediation efforts prior to and during audit windows
• Partner with external auditors, providing technical walkthroughs and supporting evidence requests
• Implement and enforce security controls across the company’s broader toolset - SaaS platforms, cloud infrastructure, and endpoint environment
• Advise and support IT on secure configuration for onboarding, offboarding, and access provisioning workflows
• Partner with engineering teams on secure development practices, secrets management, and cloud security posture
• Produce clear, concise reporting on security posture, incident trends, and audit readiness for IT leadership
• Stay current on the Microsoft security roadmap, threat landscape, and emerging attack techniques relevant to the company’s environment

Senior Security Engineer

• Developing and implementing a small-scale AI PoC (e.g., simple report generation) using available internal datasets or synthetic data.
• Learning and applying secure coding principles, input validation, dependency management, and safe use of AI libraries.
• Exploring potential risks across the AI development pipeline, such as model input manipulation, insecure storage of models or data.
• Delivering a working AI PoC that demonstrates secure design choices (e.g., accurate access controls, validated inputs, logging/auditing).
• Detailing the project journey, including lessons learned, tools used, key secure development practices applied.

Cybersecurity Intern

• Design, configure, and maintain Workday Security roles, including domain security and business process security policies.
• Manage user roles, security groups, and access provisioning within Workday HCM.
• Translate business and security requirements into effective Workday security configurations.
• Support Workday Security implementation, enhancements, and ongoing maintenance activities.
• Conduct security audits, risk assessments, and access reviews to ensure compliance standards are met.
• Troubleshoot and resolve security-related issues and access concerns.
• Collaborate with functional and integration teams to ensure secure data flow across Workday modules.
• Support SOX compliance, internal controls, and audit requirements.
• Maintain security documentation, access matrices, and design specifications.
• Participate in SIT, UAT, and production validation for security-related changes.

Security Engineer jobs in Philippines

See all jobs on JobTailor