Information Security Engineer

About the role

Jardine Service Centre Philippines is looking for a proactive Cybersecurity Engineer to act as the Incident Responder for Jardine Matheson Corporate. The role provides Level 2 and Level 3 incident response, works closely with the SOC, and continuously improves enterprise security controls across network, endpoint, identity, cloud and detection domains.

Key responsibilities

• Manage and optimise Next‑Generation Firewalls (Palo Alto, Fortinet, Check Point), WAFs, secure remote access, VPN, ZTNA and DNS security.
• Administer Secure Email Gateways with phishing protection, DMARC, SPF, DKIM and malware filtering.
• Operate EDR/XDR platforms such as CrowdStrike, Microsoft Defender for Endpoint and SentinelOne.
• Secure identity systems including Active Directory, Microsoft Entra ID, Conditional Access, MFA and privileged access controls.
• Develop and maintain detection rules in Microsoft Sentinel, Splunk, Elastic and Defender using KQL, SPL and Sigma.
• Create SOAR workflows and automation playbooks to accelerate containment and remediation.
• Conduct Purple Team exercises, breach‑and‑attack simulations and MITRE ATT&CK mapping.
• Lead vulnerability management activities across on‑premises, cloud, endpoint and network environments.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or equivalent practical experience.
• 4‑6 years of experience in cybersecurity engineering, security operations, network security or detection engineering.
• Preferred certifications include CISSP, GSEC, CySA+, CCNP Security, PCNSE, Fortinet NSE, SC‑200, AZ‑500, OSCP, eJPT or GDAT.
• Experience with Purple Team, threat emulation, adversary simulation or penetration testing is highly preferred.

Required skills

• Next‑Generation Firewalls (Palo Alto, Fortinet, Check Point)
• Web Application Firewalls, Secure Email Gateways, DNS security
• EDR/XDR platforms (CrowdStrike, Microsoft Defender, SentinelOne)
• Identity management (Active Directory, Microsoft Entra ID, MFA, Conditional Access)
• SIEM rule development (Microsoft Sentinel, Splunk, Elastic) using KQL, SPL, Sigma
• SOAR workflow design and automation scripting (PowerShell, Python, Bash)
• Vulnerability management tools (Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management)
• Knowledge of MITRE ATT&CK, NIST CSF, CIS Controls