Senior Information Security Engineer

About the role

Strategic Staffing Solutions (S3) is seeking a Senior Information Security Engineer to lead the design, implementation and continuous improvement of its security architecture. The role is hybrid, requiring on‑site presence four days a week at the Ayala office in Makati.

Key responsibilities

• Design, implement and continuously improve the IT security architecture across on‑premise, cloud and network environments.
• Enforce, review and update IT security policies, standards and procedures.
• Oversee the Managed Security Operations Center, handling monitoring, threat detection and response.
• Conduct risk and design assessments following a secure‑by‑design approach.
• Administer and monitor security tools such as firewalls, SIEM, email and web security solutions.
• Coordinate and resolve security incidents and infrastructure issues.
• Manage user access, provisioning and privilege reviews.
• Apply security patches and updates, ensuring compliance for all IT initiatives.
• Validate security compliance and produce audit trail reports.
• Participate in investigations and post‑incident reviews.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, Computer Engineering or related field.
• Strong knowledge of security architecture, controls and operational practices.
• Hands‑on experience with firewalls, antivirus, patch management, SIEM, email and web security.
• Experience in identity and access management, backup, disaster recovery and business continuity planning.
• Proven ability to investigate security incidents, perform root‑cause analysis and implement temporary controls.
• Leadership skills to coach and mentor technical teams and manage escalations.
• Excellent communication skills for interacting with technical staff and management.
• Experience in shared services or centralized IT operations is a plus; exposure to energy, utilities, SCADA, OT or IoT environments is advantageous.

Required skills

• Firewalls
• Antivirus solutions
• Patch management
• SIEM / log management
• Email security
• Web security
• Identity and Access Management (IAM)
• Backup and disaster recovery
• Business continuity planning
• SCADA / OT systems (knowledge)
• IoT security (knowledge)
• Cloud security in hybrid environments