Security Engineer – Remote (Philippines)

About the role

CyberMaxx is seeking a Security Engineer to strengthen its Managed Detection & Response (MDR) services. The role is fully remote but requires the candidate to be based in the Philippines. You will work closely with SOC analysts, threat hunters, and incident responders to design, deploy, and manage firewall and network security controls across multi‑tenant client environments.

Key responsibilities

• Design, deploy, and manage enterprise firewall solutions for MDR clients.
• Implement security policies, access controls, NAT, and network segmentation.
• Tune firewall rules to align with SOC alerts and threat intelligence.
• Collaborate with SOC teams to block malicious IPs and isolate compromised network segments.
• Integrate firewalls with SIEM, EDR, and XDR platforms for centralized visibility.
• Conduct firewall policy audits and enforce least‑privilege access.
• Manage VPN configurations, including site‑to‑site, client VPN, and zero‑trust network access.
• Document configurations, changes, and response actions for compliance.
• Participate in on‑call rotation supporting 24/7 MDR operations.

Required profile

• Minimum 3 years of experience in network security or firewall engineering, preferably in an MSSP/MDR environment.
• Hands‑on experience with enterprise firewall platforms such as Palo Alto, Fortinet, Cisco, or Check Point.
• Strong understanding of networking fundamentals (TCP/IP, routing, DNS, segmentation).
• Intermediate expertise with static and dynamic routing protocols (OSPF, BGP).
• Experience troubleshooting end‑to‑end network connectivity.
• Familiarity with security operations workflows and incident response.
• Knowledge of SIEM tools (e.g., Splunk, Microsoft Sentinel, QRadar).

Required skills

• Palo Alto Networks firewalls
• Fortinet firewalls
• Cisco firewalls
• Check Point firewalls
• TCP/IP networking
• Routing protocols: OSPF, BGP
• DNS and network segmentation
• SIEM platforms: Splunk, Sentinel, QRadar
• VPN technologies: site‑to‑site, client VPN, zero‑trust access