{"id":3063882,"url":"https://alion.io/job/cloudstaff-security-operations-engineer-hybrid","title":"Security Operations Engineer | Hybrid","company":{"id":50080,"name":"Cloudstaff","domain":"cloudstaff.com","url":"https://alion.io/company/cloudstaff","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":75,"open_postings":124,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cloudflare","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":true}],"status":"live","first_seen_at":"2026-09-03T01:21:49Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-28T02:38:45Z","board_verified":true,"closed_at":null,"days_open":55,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":55},"description":"Role Purpose\nThe Security Operations Engineer runs the business-as-usual security services stack deployed, working with Microsoft 365 E3 and Microsoft Intune, Rapid7 and the Netskope suite to protect the environment spanning Microsoft 365, Microsoft Azure and Amazon Web Services (AWS). The role works closely with the SOC Analyst to tune metrics and feeds into the Security Information and Event Management (SIEM) platform, and leads vulnerability and patch management.\nKey Responsibilities\nOperate the Nexgen Rapid7 Security Information and Event Management (SIEM) platform, ingesting logs from Microsoft Entra ID, Microsoft 365, AWS CloudTrail and AWS GuardDuty.\nTune SIEM alerts, severity classification and incident workflow with the SOC Analyst, feeding refined metrics into the platform.\nLead vulnerability management using Rapid7 and Microsoft Defender for Cloud scanning across Azure and AWS.\nRun patch management through Microsoft Intune for workstations and AWS Systems Manager for the SOHO and Digital applications.\nOperate CrowdStrike Endpoint Detection and Response or Microsoft Defender (EDR) and application whitelisting, driving full endpoint coverage.\nDeploy and validate immutable backups with Veeam and AWS Backup covering Microsoft 365 and AWS workloads\nParallel and Cross-Functional Responsibilities\nHelp cover Security Operations Centre (SOC) triage overflow and alert tuning alongside the SOC Analyst.\nProvide cloud security posture support to the DevSecOps Engineer across AWS and Azure, including Security Hub and Defender for Cloud.\nProvide endpoint hardening support to the M365 Engineer, applying Essential Eight aligned Intune baselines, and support Data Loss Prevention (DLP) operations across Microsoft Purview and Netskope.\nTechnical Environment\nRapid7 as the Security Information and Event Management (SIEM), vulnerability scanning and tracking platform\nMicrosoft 365 E3 with Microsoft Intune, Microsoft Defender, Microsoft Purview and Microsoft Entra ID, providing native telemetry into the SIEM.\nThe Netskope suite for secure web gateway, Data Loss Prevention (DLP), always-on Virtual Private Network (VPN) and Cloud Access Security Broker (CASB).\nCrowdStrike or Microsoft Defender for Endpoint Detection and Response (EDR), Cloudflare for Web Application Firewall (WAF) and Distributed Denial of Service (DDoS) protection, LastPass for password management, and Veeam and AWS Backup for backup independence.\nQualifications\nRequired Skills and Experience\nDemonstrated experience operating a Security Information and Event Management (SIEM) platform such as Rapid7 or Microsoft Sentinel.\nHands-on vulnerability and patch management experience across cloud and endpoint estates.\nWorking knowledge of Endpoint Detection and Response (EDR) and application whitelisting operations.\nPractical security experience across Amazon Web Services (AWS) and Microsoft Azure, with confidence in Microsoft 365 E3, Microsoft Intune and Microsoft Entra ID administration.\nHighly Desirable\nExperience with Rapid7 for vulnerability scanning and the Netskope suite for secure web gateway and Cloud Access Security Broker (CASB).\nFamiliarity with Microsoft Defender or CrowdStrike Endpoint Detection and Response (EDR) and Cloudflare protection services.\nExposure to backup and disaster recovery tooling such as Veeam and AWS Backup, and to the Essential Eight and Centre for Internet Security (CIS) benchmarks.\nA security certification such as Microsoft Certified: Security Operations Analyst Associate or AWS Certified Security.\nPerks and benefits\nComprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment\nUp to 24 leave credits per year\nFlexible leave credits which may be used for vacation, emergency and sick leaves\nSuperb and exciting Mid-Year Parties - with items to give away and cash prizes!\nEndless opportunities for career advancement\nExclusive ATM inside the office for employee's convenience\nAnnual Performance Review with Salary Increase\nWe set you up for success with a company-provided PC/Laptop and fiber internet connection\nLook forward to weekly office perks for work from office staff - Free Coffee, Meals and Beer Fridays!\nTop notch workplace with first class VIP lounge and game rooms\nChild friendly spaces to cater to the needs of employees with children, enhancing work-life balance\nParticipate and join our CS Social Clubs and Special Interest Groups to connect with colleagues\nInternational career growth and connections\nUnlimited cash incentives for hired referrals\nMental Wellness Employee Assistance program through Lifeworks\nIn-house psychiatrist available to support employees' well-being\nBecome part of the Employee Share Units program\nCloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.","description_format":"text","description_chars":4847,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-22T07:16:33Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.219,"p_room":0.28,"age_days":54,"expected_fill_days":22,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/cloudstaff-security-operations-engineer-hybrid","json_url":"https://alion.io/job/cloudstaff-security-operations-engineer-hybrid.json","meta":{"generated_at":"2026-10-28T03:20:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4445,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50080},"rest":"https://alion.io/mcp/rest/get_company?id=50080"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudstaff-security-operations-engineer-hybrid"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudstaff-security-operations-engineer-hybrid"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudstaff-security-operations-engineer-hybrid"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudstaff-security-operations-engineer-hybrid\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudstaff-security-operations-engineer-hybrid"}]}