{"id":3062309,"url":"https://alion.io/job/dataone-cyber-security-operations-center-csoc-engineer-2","title":"Cyber Security Operations Center (CSOC) Engineer","company":{"id":4459899,"name":"DataOne","domain":"dataone.eu","url":"https://alion.io/company/dataone-eu","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Davao City, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":42000,"period":"year","method":null,"sample_n":5423},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BloodHound","optional":false},{"name":"Cortex","optional":false},{"name":"CVE","optional":false},{"name":"DLP","optional":false},{"name":"FortiGate","optional":false},{"name":"Incident Management","optional":false},{"name":"MISP","optional":false},{"name":"OpenVAS","optional":false},{"name":"PingCastle","optional":false},{"name":"SIEM","optional":false},{"name":"Suricata","optional":false},{"name":"TheHive","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Zero Trust","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-24T09:32:56Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"About the Role & Vision\nWe are expanding our global security capabilities to deliver continuous, expert-level security operations across all DATAONE and BSO systems. Built on a foundation of proven open-source technologies and enterprise solutions, our security infrastructure is operated by a highly skilled, follow-the-sun team based in Casablanca and Davao.\nOrchestrated directly by the SOC Manager, our SOC team focuses purely on detection, response, and cyber security infrastructure management. While the team does not manage regulatory compliance directly, you will act as the technical enabler for our governance goals by providing all necessary technical evidence and reports to the compliance team to ensure successful audits.\nKey Responsibilities\nCore Focus: Dedicate operations entirely to threat detection, incident response, and security infrastructure engineering.\nAudit & Compliance Support: Collect, organize, and provide all required technical evidence, log extracts, and vulnerability reports to the compliance team to guarantee successful group audits.\nSIEM & Log Management: Maintain, tune, and optimize Wazuh for central logging, File Integrity Monitoring (FIM), and Host Intrusion Detection (HIDS) across all Group infrastructure.\nEndpoint Defense: Manage and deploy Bitdefender GravityZone for endpoint protection, threat detection, and automated host isolation during incidents.\nPerimeter & Network Security: Configure and monitor Fortinet NGFW/WAF for perimeter defense and web application security; manage network intrusion detection systems using Suricata.\nZero Trust Architecture (ZTA): Administer and secure remote infrastructure access utilizing NetBird and WireGuard.\nIncident Response & Automation (SOAR): Orchestrate incident response workflows, incident management, and automated enrichment using TheHive and Cortex.\nThreat Intelligence & Vulnerability Management: Aggregate and analyze Indicators of Compromise (IoCs) via MISP, Shadowserver, and SOCRadar. Conduct scheduled scanning and CVE tracking using OpenVAS and VulnTracker.\nActive Directory Auditing: Execute risk scoring and map complex attack paths within Active Directory using BloodHound and PingCastle, ensure follow up actions with AD Admins \nData Protection: Assist in evaluating and implementing a future Data Loss Prevention (DLP) solution to protect sensitive data across DataOne and BSO systems.\nRequirements\nRequired Technical Tooling\nPractical, hands-on engineering knowledge of the following technologies:\nSIEM / HIDS: Wazuh\nEDR / EPP: Bitdefender GravityZone\nFirewall / WAF: Fortinet (FortiGate / FortiWAF)\nZTA / VPN: NetBird, WireGuard\nSOAR / Case Management: TheHive, Cortex\nThreat Intel: MISP, Shadowserver, SOCRadar\nVulnerability Assessment: OpenVAS, VulnTracker\nAD Auditing: BloodHound, PingCastle\nNIDS: Suricata\nAnti DDOS \nQualifications & Requirements\nExperience: Minimum of 2-3 years of experience in a SOC Engineering, Systems Engineering, or Infrastructure Security role.\nLanguage: Professional fluency in English (written and spoken) is mandatory for collaborating across global sites and creating technical audit evidence.\nDatacenter/Enterprise Experience: Prior experience securing data center environments, cloud infrastructure, or large-scale enterprise networks is highly valued.\nCollaboration Skills: Proven ability to work alongside non-technical teams (like Compliance and Legal) to deliver clear, actionable data.","description_format":"text","description_chars":3441,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-22T06:55:52Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.752,"p_room":0.75,"age_days":19,"expected_fill_days":26,"reasons":["conf:0","win:late"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/dataone-cyber-security-operations-center-csoc-engineer-2","json_url":"https://alion.io/job/dataone-cyber-security-operations-center-csoc-engineer-2.json","meta":{"generated_at":"2026-10-24T12:14:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17559,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4459899},"rest":"https://alion.io/mcp/rest/get_company?id=4459899"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdataone-cyber-security-operations-center-csoc-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdataone-cyber-security-operations-center-csoc-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdataone-cyber-security-operations-center-csoc-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dataone-cyber-security-operations-center-csoc-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdataone-cyber-security-operations-center-csoc-engineer-2"}]}