Top IT Jobs in Caloocan

Supports TransUnion’s regional information security program by implementing security controls, monitoring and responding to threats, supporting vulnerability management and penetration testing, conducting security and compliance assessments, facilitating application security, managing third-party risk, delivering security awareness, and reporting security metrics. The role partners with technology, legal, compliance, sales, product, audit, vendors, and external auditors across the Asia Pacific region.

Manage and triage information security risk records in eGRC, engage technical stakeholders for risk reviews, support risk services modernization, ensure SLAs, drive remediation, and educate business units on compliance and security frameworks.

Conduct application security testing, code reviews, vulnerability management, and secure coding guidance. Configure security tools and automate testing within CI/CD pipelines. Collaborate with developers and DevOps teams, provide security training, research emerging threats, and support incident response involving application vulnerabilities.

Develop and govern security frameworks for AI/ML platforms, LLM applications, RAG systems, AI agents, and cloud infrastructure. Assess AI-specific threats, secure cloud workloads and APIs, conduct threat modeling and adversarial testing, implement monitoring, and support AI governance, regulatory alignment, security standards, and stakeholder education.

Designs and governs security for Databricks lakehouse environments on Azure and AWS. Responsibilities include Unity Catalog access controls, workspace and network security, secrets and identity management, audit logging, data protection, compliance, security baselines, configuration-as-code, and ML pipeline risk assessments. The role advises engineering teams, supports audits, and serves as the internal Databricks security subject matter expert.

Build AI-assisted security tools, workflows, and integrations that embed secure engineering guidance across development processes. Analyze designs, code, cloud configurations, and data flows for security risks; maintain traceable security knowledge; automate repetitive activities; document remediation and residual risk; and collaborate with architects and engineering teams to turn prototypes into maintainable capabilities.

Design and lead enterprise security architecture reviews across applications, APIs, cloud platforms, and integrations. Build AI-assisted security solutions, automation, APIs, reusable frameworks, and developer tooling integrated with Git workflows, CI/CD pipelines, and infrastructure-as-code. Enable secure software development through threat modeling, security requirements, design patterns, DevSecOps practices, and cloud security guidance. Partner with engineering, platform, product, and business stakeholders to manage risks, establish guardrails, and scale secure engineering capabilities.

Leads customer-facing proactive cybersecurity engagements, including tabletop exercises, security posture and incident response readiness assessments, incident response plans and playbooks, response training, compliance reviews, vulnerability assessments, and security-control recommendations. Develops network topology recommendations and reports for technical and executive audiences while helping mature proactive security services.

Proactively hunts advanced cyber threats by developing hypotheses, analyzing logs, network traffic, endpoints, and telemetry, and researching malware and attacker techniques. The role creates hunt playbooks, documents findings, supports incident response, assesses vulnerabilities, and collaborates with detection engineering to improve SOC defenses and automate responses.

Monitors, detects, investigates, and responds to cybersecurity events as part of a Cyber Monitoring and Incident Response Team. Performs eDiscovery, technical investigations, reporting, and incident response activities; leads assigned technical tasks, mentors junior staff, participates in exercises and process improvement, and supports an on-call rotation with occasional after-hours work and travel.

Leads security teams and manages customer trust engagements, including security inquiries, audits, RFPs, assessments, and Trust Centre content. Oversees third-party risk, governance, KPIs, incident and vulnerability management, change reviews, compliance monitoring, and security solutions. The role requires strong information security framework knowledge, customer-facing communication, people leadership, project management, analytical ability, and enterprise AI adoption.

Reviews and generates cloud compliance and audit reports, applying cloud governance and PCI knowledge. The role also expects proactive adoption of AI and familiarity with at least one cloud service provider.

Assess and secure web applications and open-source telephony solutions through code reviews, vulnerability scanning, fuzzing, penetration testing, and manual inspection. Develop and manage SAST, DAST, IAST, and CI/CD security tools; support SSDLC implementation; review code releases; document vulnerabilities; improve threat detection; coordinate third-party assessments; and address client security inquiries.

Participate in Citi’s 10-week Summer Analyst Program, receiving technical training, mentoring, networking, and on-the-desk experience. Contribute to cybersecurity, digital banking, data analytics, generative AI, software development, enterprise resiliency, and operational projects. Collaborate globally on real-world initiatives, apply programming and problem-solving skills, and help protect Citi and client information and assets.

Manage end-to-end delivery of enterprise security technology projects, including CCTV modernization, centralized monitoring, access card replacement, system migrations, testing, commissioning, and handover. Coordinate clients, stakeholders, vendors, consultants, and operational teams while managing schedules, budgets, risks, quality, compliance, procurement, and governance requirements across multiple locations.

Designs, builds, and maintains system integrations using APIs, webhooks, Workato, and cloud platforms. Develops Azure infrastructure, scripts, and applications; applies version control and CI/CD practices; contributes to technical architecture; and supports API management, monitoring, observability, and identity configuration. The role collaborates with business and technology stakeholders to deliver reliable integration solutions and uses AI-assisted tools for development and troubleshooting.

Monitors physical security systems, alarms, and operational dashboards in a 24/7 Security Operations Center. Receives, triages, documents, and escalates security incidents; responds to emergency alerts; maintains incident awareness; coordinates responses; and conducts structured shift handovers. The role requires accurate documentation, sound judgment, strong communication, attention to detail, and adherence to security procedures while handling sensitive information in an in-person, shift-based environment.

The Application Security Engineer will remediate hard-coded secrets, integrate applications with Azure Key Vault or HashiCorp Vault, and develop secure backend services, APIs, automation, and reusable components. Responsibilities include secure SDLC implementation, vulnerability assessment and remediation, CI/CD security integration, architecture reviews, preventive control design, and stakeholder communication. The role requires collaboration with developers, security teams, architects, executives, and global business stakeholders.

Conduct web and mobile penetration testing, manage vulnerability remediation and reporting, monitor operational security risks, investigate incidents, and support users. Collaborate with engineering and DevOps teams on secure development, automated vulnerability detection, software risk reviews, threat modeling, security awareness, and ISO 27001 and SOC 2 controls. Requires application security expertise, programming and scripting skills, cloud and SIEM knowledge, and completion of background and NBI checks.

Drives application security enablement across the software development lifecycle in Asia. Responsibilities include vulnerability assessment and remediation, threat modeling, exception reviews, secure coding guidance, application security testing, DevSecOps integration, and security tooling automation. The role partners with global security, engineering, architecture, and development teams to implement enterprise standards, improve security maturity, support audits, and strengthen application security across cloud, container, API, and hybrid environments.

Leads corporate physical security and risk management programs, including site assessments, incident and emergency response, security awareness, investigations, access control and surveillance governance, vendor oversight, event security, executive protection support, and executive reporting. Partners with HR, Legal, Compliance, and business stakeholders to improve security preparedness and mitigate risks across company sites.

Monitors, investigates, and responds to cybersecurity incidents as a Tier 2 SOC escalation point. Performs alert triage, log correlation, forensic analysis, threat hunting, IOC identification, containment, remediation, and root-cause analysis across endpoint, network, cloud, identity, and SIEM platforms. Develops incident-response playbooks, improves SOC detections and tools, documents findings, supports risk analysis and security awareness, and mentors junior analysts while collaborating with incident response, threat intelligence, and security engineering teams.

Supports cybersecurity operations by collecting, analyzing, and interpreting data to identify risks, anomalies, and emerging threats. Executes defined processes, maintains operating procedures, recommends efficiency improvements, and contributes to automation and process optimization. The role requires strong analytical skills, attention to detail, communication abilities, and foundational knowledge of scripting, queries, networking, and cyber monitoring. It is hybrid in Quezon City and requires night-shift availability.

Monitor security alerts and logs, investigate and support responses to cybersecurity incidents, manage vulnerabilities and remediation, maintain patch records, administer access controls and endpoint protections, and support security policies, audits, and awareness initiatives. The role collaborates with IT and security teams to contain threats and improve organizational security controls.

Manages endpoint protection, vulnerability management, firewalls, SIEM, and other security solutions. Performs vulnerability assessments, hardening recommendations, patching, remediation, troubleshooting, automation, and client consultation. Provides escalated technical support, maintains security infrastructure and documentation, collaborates with vendors, and participates in on-call coverage. The role requires practical experience with Microsoft environments, security tooling, Python or PowerShell scripting, security frameworks, and customer-facing remediation planning.