Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 hours ago

Senior Security Engineer

Sourcefit109 open roles

Where
Bridgetowne Quezon City, Philippines, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security EngineerSourcefit · Bridgetowne Quezon City, Philippines, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Sourcefit's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. Sourcefit postings stay open a median of 16 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 5 hours ago

Sourcefit median: 16 days open

The posting

JOB DESCRIPTION

Senior Security Engineer

Position Summary

We are looking for a Senior Security Engineer to implement and improve managed security services across endpoint, identity, email, network, secure access and cloud environments. This is a hands-on role focused on technical delivery, troubleshooting and clear customer communication.

Working with established architects and international delivery teams, you will own complex engineering work, improve service baselines and mentor colleagues. Strong systems and networking foundations matter more than knowledge of every named product; specialist platform training and certification support are available.

Job Details

Work Setup: Hybrid. Work from home initially, with short weekly office meetings (around 1–2 hours). Office attendance will gradually increase as the team grows, potentially to 2–3 days per week.

Schedule: Monday to Friday | 5 PM to 2 AM Philippine time.

Responsibilities

  • Implement, configure and maintain endpoint, identity, email, firewall, IDS/IPS, secure access and cloud security controls; tune policies, exclusions and allow/block lists without weakening protection.
  • Translate technical and client requirements into implementation plans, with testing, change and configuration management, rollback arrangements and clear technical handovers.
  • Onboard client users, devices, tenants, sites and remote users, including endpoint agents, Microsoft 365/Google Workspace integrations and secure access.
  • Administer and harden Microsoft 365, Entra ID, Exchange Online, Google Workspace and cloud environments; manage access controls, mail flow, SPF, DKIM, DMARC and related DNS changes.
  • Investigate alerts and incidents, including phishing, business email compromise, identity misuse, ransomware and network issues; contain threats, preserve evidence, remediate and document root causes within agreed SLAs.
  • Run vulnerability assessments, track remediation and work with specialist testing teams on findings. Coordinate technical escalations with architects, vendors and third-party identity/access service providers.
  • Contribute to SIEM log onboarding, log-source health, queries, detection tuning and dashboards within assigned services, with specialist data-platform engineering supported by the wider technical team.
  • Improve repeatable onboarding, remediation and response tasks using approved scripts, APIs and automation, including SOAR playbooks and alert-to-ticket workflows where appropriate.
  • Use approved AI tools for investigation, query writing and documentation with confidentiality controls and human review; help evaluate detection accuracy and false positives.
  • Apply agreed security and regulatory controls, maintain runbooks, tickets and change records, and support audits, incident reporting, post-incident reviews and improvements informed by emerging threats.
  • Report service performance and improvements, including detection/response times, false positives and automation coverage; explain technical findings, risks and next steps clearly to clients.
  • Collaborate with international teams, contribute reusable tools and knowledge, develop through technical training, and participate in agreed escalation and on-call rotas.
  • Own complex security implementations within your areas of expertise, such as email migrations, cloud hardening or SASE/SD-WAN deployments; review technical changes and mentor engineers.
  • Lead complex incidents and technical investigations within your expertise; contribute to threat hunting and tested detection content aligned to MITRE ATT&CK, and brief clients on findings and actions.
  • Where relevant, support security telemetry, data-quality improvements, reusable detection content and automation, working with specialists on advanced data-platform architecture.
  • Contribute to responsible AI-assisted security workflows and detection improvements, with confidentiality, human review and measurable outcomes.
  • Support vendor reviews, new service improvements, client service reviews and occasional pre-sales scoping where relevant; hands-on technical delivery remains the primary focus.

Qualifications

  • At least 5 years of relevant hands-on engineering experience, including substantial security implementation and troubleshooting. Candidates who progressed from systems or network administration into security engineering are welcome.
  • Strong practical foundations in systems administration, network engineering or related infrastructure work, with evidence of hands-on security engineering responsibilities.
  • Demonstrated implementation and troubleshooting experience, with clear examples of systems configured, changes delivered and problems personally resolved.
  • Strong systems and networking foundations, such as Microsoft technologies, Linux/Red Hat, routing, switching, DNS, VPNs and firewalls.
  • Practical strength in endpoint/identity, email, network/secure access or cloud security. Equal depth across all domains is not required.
  • Relevant technical/vendor certification, such as Microsoft, Cisco, Check Point, Palo Alto or equivalent. Previously earned credentials, including expired certifications, may be considered.
  • Excellent written and spoken English, customer empathy, and the ability to explain technical issues confidently to European and North American customers.
  • Practical problem-solving, independent ownership, honest assessment of technical strengths and gaps, and sound judgment about when to seek guidance or escalate.
  • Willingness to learn new platforms, follow security and change-control practices, and develop through training and certification.

Nice to Have

  • Experience in an MSP/MSSP or other multi-client managed services environment, or in regulated industries; familiarity with NIST CSF, ISO 27001, CIS Controls or related frameworks.
  • Exposure to Microsoft Defender, Sentinel, Huntress, Check Point, Cato Networks or comparable endpoint, identity, email, network and cloud security platforms.
  • PowerShell or Python, APIs, Git, Terraform, KQL/SQL, SIEM/SOAR, detection engineering or threat hunting experience.
  • Experience with security data pipelines, scalable telemetry, detection-as-code, AI-assisted workflows, practical AI/ML projects or LLM security risks such as prompt injection and data leakage.
  • Technical design input, mentoring, vendor coordination or pre-sales experience supporting managed security services.
  • German, French or Spanish language skills.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Sourcefit's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Sourcefit's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Sourcefit's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.