Top IT Jobs in Caloocan

Responsible for developing and maintaining the organization's IT security procedures and cyber security framework; evaluating, testing, and monitoring security policies, access management, hardware and software; designing and troubleshooting security systems; investigating and resolving security incidents and breaches; and recommending controls to prevent future incidents.

Serve as an escalation point in the CSOC to perform advanced incident analysis, containment, forensics, malware analysis, SIEM and EDR tuning, threat hunting, documentation, playbook development, mentoring, and cross-team remediation to improve security posture.

Lead and mature a global security incident response capability: detect, triage, contain, and analyze threats; build playbooks and automation; manage a 24x7 vendor, a small global response team, and drive security monitoring, remediation, and cross-team governance aligned to standards and roadmaps.

Monitor SOC channels and event queues, perform initial triage and investigation using SIEM and log tools, document findings and shift logs, escalate to Level 2, conduct threat research, and support continuity as backup analyst.

Plan, implement, and monitor security controls to protect systems, data, and infrastructure. Support incident response, audits, security projects, awareness programs, compliance, and administration of security technologies.

Monitor, investigate, and remediate endpoint and network security events. Design, configure, and deploy enterprise security controls (EDR, DLP, SIEM, WAF, proxies). Conduct threat modeling, risk assessments, and compliance audits (ISO, PCI, HIPAA). Integrate endpoint solutions across cloud and on-prem environments and support incident triage and intrusion detection efforts.

Operate and monitor global IT security across vessels, depots, terminals and seafarms. Manage third-party risk, detect and respond to incidents, support identity and email security, handle personal data breach response, review firewall rulebases, maintain SOC documentation, and leverage threat intelligence to strengthen security posture while coordinating with internal teams and vendors.

Monitor security events 24/7 using SIEM and other tools, analyze logs and packet captures, triage alerts, document findings, perform root-cause analysis, and escalate incidents to the incident response team.

Monitor security systems, perform vulnerability scans and penetration testing, analyze logs and incidents, respond to and remediate breaches, maintain firewalls/IDS/IPS and SIEM, develop security policies, collaborate with IT, and educate staff on security best practices.

Lead FedRAMP operations and SOC monitoring, manage FedRAMP compliance lifecycle, develop SSP/POA&M and automation, run security assessments/audits, coordinate with internal teams and external auditors, and report compliance status to stakeholders.

Trend Micro seeks passionate, innovative fresh graduates for cybersecurity roles. Candidates will join a mission-driven team to learn, grow, and help protect digital information against evolving threats.

Lead and coordinate information security rollout and governance across Wholesale Banking Asia. Provide subject matter expertise, advisory support, cyber scenario analysis, regulatory change management, third-party cyber risk oversight, and training to ensure alignment with global WB CISO strategy and regional business operations.

Drive and deliver security initiatives end-to-end: translate policies into technical solutions, partner with DevOps and engineering, support vulnerability management, hardening, monitoring, penetration and application security testing, and manage firewall reviews and regulatory security programs.

Design, implement, and maintain secure cloud architectures across major cloud providers. Assess vulnerabilities and misconfigurations, enforce security policies and frameworks, integrate security into CI/CD, monitor threats via SIEM/CSPM, lead incident response and forensics, and automate security controls using IaC and scripting.

Lead security strategy and controls for MS SQL Server environments: implement encryption and RBAC, integrate logs with SIEM, detect/respond to threats, harden configurations to CIS/Microsoft standards, support compliance/audits, automate security tasks, and mentor junior staff.

Lead design and implementation of GCP security architecture and controls, manage IAM and VPC security, integrate security tooling into CI/CD and IaC, perform threat modeling and assessments for financial workloads, support audits and posture monitoring, and communicate cloud security risks and updates to stakeholders.

Lead deep incident investigations across cloud, identity, endpoint, application, and network layers; engineer high‑fidelity detections and SOAR automations; perform proactive threat hunting; enhance AI-driven SOC capabilities; mentor analysts and participate in mandatory on‑call rotation.

Lead design and implementation of Azure security architectures and controls for a regulated financial environment. Own Defender for Cloud, Sentinel, Entra ID, Key Vault, policy/blueprint governance, network security, incident response, and DevSecOps integration. Conduct threat modeling, risk assessments, regulatory alignment, reporting, and mentor junior engineers.

Support client transitions and managed services rollouts by performing environment discovery, deploying and configuring security and managed-services tools (EDR, SIEM, M365 security, RMM/PSA), documenting configurations and processes, coordinating handoffs, resolving vendor issues, and managing service/project tickets to ensure secure, stable client environments.

Senior Security Analyst responsible for strengthening security posture across MSP client environments via SIEM tuning, EDR/XDR management, Microsoft 365 log analysis, endpoint and identity hardening, phishing and awareness programs, vulnerability remediation, compliance support (NIST CSF, CMMC, SOC), automation/AI validation, and senior technical escalation.

Senior network security engineer responsible for designing, implementing and supporting network and security solutions. Acts as Level 3 escalation, mentors team members, participates in on-call and service restoration, and collaborates with project management to deliver client-facing architectures and deployments.

Design, implement, and operate IGA/IAM solutions (One Identity Manager or equivalent). Handle operational requests/incidents, integrate IAM with applications, run JML workflows and access recertifications, remediate entitlement issues, ensure compliance (e.g., PCI DSS), facilitate workshops, document processes, and collaborate with security, IT, and business teams.

Lead development of cyber security capabilities including vulnerability management, platform engineering, detection and response, privileged access management, cloud security (AWS), and remediation of penetration test findings. Collaborate with architects and offensive teams, maintain tooling effectiveness, deliver security metrics, and embed secure-by-design principles across projects.

Monitor and investigate inbound/outbound email for spam, phishing, spoofing and abuse. Use Splunk for log analysis, validate SPF/DKIM/DMARC, execute mitigations (block/quarantine/escalate), document incidents, maintain audit trails, meet SLAs in a 24x7 environment, and collaborate with internal teams and vendors to resolve issues and track trends.

Maintain and strengthen country-level cybersecurity by implementing global security tools, managing endpoint protection, vulnerability scanning, patching and anti-malware, responding to incidents and coordinating with SOC/regional teams. Conduct risk assessments, support security in projects, run awareness and phishing simulations, assist audits and ensure compliance with global standards and local regulations.