{"id":1518267,"url":"https://alion.io/job/axosbank-sr-cyber-security-engineer","title":"Sr. Cyber Security Engineer","company":{"id":1988551,"name":"Axos Bank","domain":"axosbank.com","url":"https://alion.io/company/axosbank","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":89,"open_postings":33,"ghost_share":0,"stale_share":0.455,"repost_share":0,"time_to_fill_p50_days":54,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manila, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":34000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"Splunk","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-09-08T00:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-15T08:19:56Z","board_verified":true,"closed_at":null,"days_open":37,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":37},"description":"Axos Business Center, CorpAbout This Job\nThe Senior Security Engineer is a key technical leader within Axos Bank’s Security Engineering organization and plays a central role in transforming our traditional Security Operations Center into an AI driven, investigation centric threat response function. This lrole is not a traditional SOC analyst position-it is an engineering forward role focused on deep incident investigation, advanced threat detection engineering, proactive threat hunting, and enhancing the AI SOC platform so it can autonomously perform higher quality investigations at scale.The ideal candidate is highly technical, curious, and hands on-comfortable analyzing complex attack patterns, engineering detections, and building automation that amplifies the speed and precision of Axos’s AI enabled SOC.\nKey Responsibilities\nCybersecurity Incident Investigation\nLead complex security incident investigations across cloud, identity, endpoint, application, and network layers.\n\nPerform root-cause analysis, kill-chain reconstruction, and evidence preservation with engineering-grade depth.\n\nConvert investigation findings directly into new detections, automation playbooks, and AI features to reduce recurrence and detection gaps.\n\nParticipate in a mandatory on-call rotation, serving as a senior escalation point for complex security incidents-ensuring rapid, high-quality investigative response and feeding lessons learned back into detections, automations, and the AI SOC platform.\n\nThreat Detection Engineering\nDesign, build, and tune high-fidelity detection logic across Splunk, SOAR, cloud platforms, and other security telemetry systems.\n\nEstablish repeatable processes for hypothesis-driven detection creation, simulation, validation, and tuning.\n\nImprove detection precision by reducing false positives and strengthening behavioral and contextual analytics.\n\nProactive Threat Hunting\nConduct proactive, intelligence-driven hunts across large datasets using advanced analytics, anomaly detection, and adversary-emulation techniques.\n\nIdentify unknown threats, emerging attacker behaviors, and gaps in telemetry or tooling.\n\nTranslate hunting insights into durable detections, AI models, automated enrichment, and new investigation workflows.\n\nAI SOC Platform Enhancement\nImprove the AI SOC platform’s ability to perform autonomous or semi-autonomous investigations by contributing high-value signals, features, and decision logic.\n\nWork closely with AI and Security Engineering leadership to integrate hunting patterns, investigation heuristics, and detection insights into AI pipelines.\n\nBuild feedback loops that allow AI models to learn from analyst investigations and improve over time.\n\nAutomation & SOAR Engineering\nCreate high-reliability automation workflows that handle triage, enrichment, correlation, and containment actions.\n\nCollaborate with Detection Engineering and Splunk/automation teams to integrate new data sources, threat-intelligence feeds, and enrichment pipelines.\n\nCollaboration & Engineering Excellence\nWork closely with SecOps, Cloud, AppSec, Detection Engineering, and AI Engineering teams to strengthen detection coverage and reduce operational friction.\n\nProduce high-quality documentation, playbooks, knowledge articles, and engineering runbooks.\n\nMentor SOC analysts, junior engineers, and cross-team partners to uplift investigation quality and detection maturity.\n\nRequired Qualifications\n5+ years of experience in cybersecurity (incident response, threat detection, security engineering, or threat hunting).\n\nStrong technical expertise in cloud security, identity security, endpoint telemetry, network analysis, or application security.\n\nProven ability to perform deep-dive incident investigations involving cloud IAM, lateral movement, privilege escalation, API abuse, malware, or application-layer threats.\n\nHands-on experience with SIEMs (Splunk preferred), EDR tools, SOAR platforms, and automation frameworks.\n\nAbility to write and tune detection rules, correlation logic, saved searches, and behavioral analytics.\n\nStrong scripting ability (Python preferred) and familiarity with data analysis techniques.\n\nWillingness and ability to participate in a mandatory on-call rotation and act as a senior escalation point during high-severity incidents.\n\nPreferred Qualifications\nExperience partnering with AI/ML engineering teams or contributing to AI-assisted security tooling.\n\nBackground in threat intelligence, malware analysis, or offensive security (red team, adversary emulation).\n\nKnowledge of cloud-native detection patterns (AWS, Azure), identity-based attacks, and API security.\n\nCertifications such as GCIH, GCDA, GDAT, GCTI, GCFA, or equivalent are a plus.\n\nAbout Axos\nBorn digital-first, Axos delivers financial tools and services that allow individuals, small businesses, and companies to access and manage their money how, when, and where they want. We’re a diverse team of dynamic, insightful, and independent innovators who are excited to provide technology-driven solutions that offer unbeatable value to our customers.\nAxos Financial is our holding company and is publicly traded on the New York Stock Exchange under the symbol \"AX\" (NYSE: AX).\nLearn More about working at Axos Business Center\nPre-Employment Background Check, Medical, and Drug Test:\nAll offers are contingent upon the candidate successfully passing a credit check, criminal background check, and pre-employment medical and drug screening.\nEqual Employment Opportunity:\nAxos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.\nJob Functions and Work Environment:\nWhile performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc.\nThe work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.","description_format":"text","description_chars":6716,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Financial Services","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-09-30T10:34:12Z"}],"visa":[],"liveness":{"score":84,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.928,"p_room":0.9,"age_days":37,"expected_fill_days":54,"reasons":["conf:2","urgency","velocity","win:mid","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/axosbank-sr-cyber-security-engineer","json_url":"https://alion.io/job/axosbank-sr-cyber-security-engineer.json","meta":{"generated_at":"2026-10-15T08:49:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13310,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1988551},"rest":"https://alion.io/mcp/rest/get_company?id=1988551"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faxosbank-sr-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faxosbank-sr-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faxosbank-sr-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/axosbank-sr-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faxosbank-sr-cyber-security-engineer"}]}