{"id":586306,"url":"https://alion.io/job/gotyme-senior-cyber-security-engineer","title":"Senior Cyber Security Engineer","company":{"id":50047,"name":"GoTyme Bank","domain":"gotyme.com.ph","url":"https://alion.io/company/gotyme-bank","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":89,"open_postings":20,"ghost_share":0,"stale_share":0.45,"repost_share":0,"time_to_fill_p50_days":51,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Quezon City, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":42000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-09T00:00:00Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-11-08T11:04:05Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":60},"description":"About GoTyme\nGoTyme is a joint venture between the Gokongwei Group, one of the biggest conglomerates in the Philippines, and the Singapore-headquartered digital banking group Tyme. This venture combines the trusted Gokongwei brand, customer base, and distribution ecosystem with Tyme’s globally proven digital banking technology and hands-on experience building South Africa’s leading digital bank, TymeBank, one of the fastest-growing digital banks in the world today.\nAt GoTyme, we have embarked on a journey to democratize financial services and bring next-level banking to the Philippines. We seek individuals who share our belief that the game is worth changing, to join our growing team of GoTymers as we build, launch, and scale a bank that empowers all Filipinos to navigate a path to financial freedom.\nAbout the role\nWe are seeking a Senior Cyber Security Engineer to join our cybersecurity team, operating with an AI- and automation-first mindset. This role goes beyond monitoring and response and requires technical leadership, deep investigative expertise, and the ability to design, improve, and scale security controls across cloud, endpoint, and identity environments.\nThe successful candidate will act as a subject-matter expert, leading complex investigations, driving proactive threat detection, mentoring junior engineers, and partnering with technology and business teams to continuously strengthen the organisation’s security posture.\nSecurity Monitoring, Engineering & Analysis\nLead advanced monitoring and analysis of security events across AWS, Azure, and endpoint platforms\nDesign, enhance, and optimise detection logic using CloudTrail, GuardDuty, Security Hub, Azure Sentinel, Defender, and EDR/XDR tools\nProactively identify security gaps, misconfigurations, and control weaknesses across cloud and SaaS environments\nDevelop and maintain automated detection and response workflows using scripting and SOAR principles\nPerform deep analysis of DLP alerts, ensuring protection of sensitive and regulated data\nIncident Response, Forensics & Crisis Management\nAct as a lead investigator for high-severity security incidents\nDrive end-to-end incident response activities, including containment, eradication, and recovery\nConduct advanced host, cloud, and log-based forensic analysis\nProduce executive-level incident reports, root-cause analyses, and post-incident improvement plans\nSupport tabletop exercises, incident simulations, and continuous improvement of IR playbooks\nThreat Detection, Hunting & Intelligence\nLead proactive threat hunting activities using behavioural analytics and threat intelligence\nMap detections to MITRE ATT&CK and continuously improve coverage\nPerform advanced malware analysis and support reverse-engineering efforts when required\nTranslate threat intelligence into actionable detections and preventive controls\nStay ahead of emerging attack techniques, cloud-native threats, and identity-based attacks\nIdentity, Access & Privileged Security\nOversee monitoring and investigation of privileged access and identity-based threats\nLead IAM security reviews and contribute to least-privilege and zero-trust initiatives\nInvestigate anomalous authentication behaviour and insider-risk indicators\nPartner with IAM teams to strengthen identity security architecture and controls\nSecurity Engineering, Architecture & Enablement\nContribute to the design and improvement of cloud and enterprise security architectures\nDefine security requirements for new platforms, services, and integrations\nSupport compliance initiatives aligned to ISO 27001, SOC 2, NIST, PCI DSS and internal risk frameworks\nMentor junior engineers and analysts, providing technical guidance and review\nInfluence security strategy through technical insight and data-driven recommendations\nRequirements\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field\n7-10+ years of hands-on experience in cybersecurity engineering, SOC, or security operations roles\nDemonstrated experience leading complex security investigations and incident response\nProven ability to design, tune, and maintain security detections at scale\nExperience mentoring or technically leading other security practitioners\nDeep expertise in AWS security services (CloudTrail, GuardDuty, Config, Security Hub)\nStrong experience with Azure security tooling (Sentinel, Defender, Security Center)\nAdvanced knowledge of EDR/XDR platformsand endpoint telemetry\nHands-on experience with SIEM, SOAR, and log analytics platforms\nStrong understanding of networking, IAM, authentication protocols, and attack vectors\nProficiency in Python, PowerShell, or Bashfor automation and analysis\nExperience applying threat hunting and detection engineeringmethodologies\n Familiarity with AI-driven security tooling and prompt-based analysis","description_format":"text","description_chars":4839,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Incident Response","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-09-10T04:43:25Z"}],"visa":[],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.806,"p_room":0.44,"age_days":60,"expected_fill_days":51,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/gotyme-senior-cyber-security-engineer","json_url":"https://alion.io/job/gotyme-senior-cyber-security-engineer.json","meta":{"generated_at":"2026-11-08T13:46:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29193,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50047},"rest":"https://alion.io/mcp/rest/get_company?id=50047"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgotyme-senior-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgotyme-senior-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgotyme-senior-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gotyme-senior-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgotyme-senior-cyber-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":586306}},{"tool":"search_jobs","arguments":{"company":"gotyme.com.ph","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":586306},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}