{"id":3795390,"url":"https://alion.io/job/sourcefit-senior-security-engineer","title":"Senior Security Engineer","company":{"id":50085,"name":"Sourcefit","domain":"sourcefit.com","url":"https://alion.io/company/sourcefit","size_band":"51-200","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":{"grade":"B","score":81,"open_postings":10,"ghost_share":0,"stale_share":0.7,"repost_share":0.1,"time_to_fill_p50_days":36,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Quezon City, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Google Workspace","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Hat","optional":false},{"name":"SIEM","optional":false},{"name":"Git","optional":true},{"name":"ISO 27001","optional":true},{"name":"LLM","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"NIST CSF","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-05T08:13:31Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T03:38:55Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"JOB DESCRIPTION\nSenior Security Engineer\nPosition Summary\nWe are looking for a Senior Security Engineer to implement and improve managed security services across endpoint, identity, email, network, secure access and cloud environments. This is a hands-on role focused on technical delivery, troubleshooting and clear customer communication.\nWorking with established architects and international delivery teams, you will own complex engineering work, improve service baselines and mentor colleagues. Strong systems and networking foundations matter more than knowledge of every named product; specialist platform training and certification support are available.\nJob Details\nWork Setup: Hybrid. Work from home initially, with short weekly office meetings (around 1-2 hours). Office attendance will gradually increase as the team grows, potentially to 2-3 days per week.\nSchedule: Monday to Friday | 5 PM to 2 AM Philippine time.\nResponsibilities\nImplement, configure and maintain endpoint, identity, email, firewall, IDS/IPS, secure access and cloud security controls; tune policies, exclusions and allow/block lists without weakening protection.\nTranslate technical and client requirements into implementation plans, with testing, change and configuration management, rollback arrangements and clear technical handovers.\nOnboard client users, devices, tenants, sites and remote users, including endpoint agents, Microsoft 365/Google Workspace integrations and secure access.\nAdminister and harden Microsoft 365, Entra ID, Exchange Online, Google Workspace and cloud environments; manage access controls, mail flow, SPF, DKIM, DMARC and related DNS changes.\nInvestigate alerts and incidents, including phishing, business email compromise, identity misuse, ransomware and network issues; contain threats, preserve evidence, remediate and document root causes within agreed SLAs.\nRun vulnerability assessments, track remediation and work with specialist testing teams on findings. Coordinate technical escalations with architects, vendors and third-party identity/access service providers.\nContribute to SIEM log onboarding, log-source health, queries, detection tuning and dashboards within assigned services, with specialist data-platform engineering supported by the wider technical team.\nImprove repeatable onboarding, remediation and response tasks using approved scripts, APIs and automation, including SOAR playbooks and alert-to-ticket workflows where appropriate.\nUse approved AI tools for investigation, query writing and documentation with confidentiality controls and human review; help evaluate detection accuracy and false positives.\nApply agreed security and regulatory controls, maintain runbooks, tickets and change records, and support audits, incident reporting, post-incident reviews and improvements informed by emerging threats.\nReport service performance and improvements, including detection/response times, false positives and automation coverage; explain technical findings, risks and next steps clearly to clients.\nCollaborate with international teams, contribute reusable tools and knowledge, develop through technical training, and participate in agreed escalation and on-call rotas.\nOwn complex security implementations within your areas of expertise, such as email migrations, cloud hardening or SASE/SD-WAN deployments; review technical changes and mentor engineers.\nLead complex incidents and technical investigations within your expertise; contribute to threat hunting and tested detection content aligned to MITRE ATT&CK, and brief clients on findings and actions.\nWhere relevant, support security telemetry, data-quality improvements, reusable detection content and automation, working with specialists on advanced data-platform architecture.\nContribute to responsible AI-assisted security workflows and detection improvements, with confidentiality, human review and measurable outcomes.\nSupport vendor reviews, new service improvements, client service reviews and occasional pre-sales scoping where relevant; hands-on technical delivery remains the primary focus.\nQualifications\nAt least 5 years of relevant hands-on engineering experience, including substantial security implementation and troubleshooting. Candidates who progressed from systems or network administration into security engineering are welcome.\nStrong practical foundations in systems administration, network engineering or related infrastructure work, with evidence of hands-on security engineering responsibilities.\nDemonstrated implementation and troubleshooting experience, with clear examples of systems configured, changes delivered and problems personally resolved.\nStrong systems and networking foundations, such as Microsoft technologies, Linux/Red Hat, routing, switching, DNS, VPNs and firewalls.\nPractical strength in endpoint/identity, email, network/secure access or cloud security. Equal depth across all domains is not required.\nRelevant technical/vendor certification, such as Microsoft, Cisco, Check Point, Palo Alto or equivalent. Previously earned credentials, including expired certifications, may be considered.\nExcellent written and spoken English, customer empathy, and the ability to explain technical issues confidently to European and North American customers.\nPractical problem-solving, independent ownership, honest assessment of technical strengths and gaps, and sound judgment about when to seek guidance or escalate.\nWillingness to learn new platforms, follow security and change-control practices, and develop through training and certification.\nNice to Have\nExperience in an MSP/MSSP or other multi-client managed services environment, or in regulated industries; familiarity with NIST CSF, ISO 27001, CIS Controls or related frameworks.\nExposure to Microsoft Defender, Sentinel, Huntress, Check Point, Cato Networks or comparable endpoint, identity, email, network and cloud security platforms.\nPowerShell or Python, APIs, Git, Terraform, KQL/SQL, SIEM/SOAR, detection engineering or threat hunting experience.\nExperience with security data pipelines, scalable telemetry, detection-as-code, AI-assisted workflows, practical AI/ML projects or LLM security risks such as prompt injection and data leakage.\nTechnical design input, mentoring, vendor coordination or pre-sales experience supporting managed security services.\nGerman, French or Spanish language skills.","description_format":"text","description_chars":6399,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"All levels","optional":true},{"language":"Spanish","level":"All levels","optional":true},{"language":"German","level":"All levels","optional":true},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Recruiting & Staffing","Business Process Outsourcing (BPO)","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-11-05T09:10:26Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["conf:0","stale_co","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/sourcefit-senior-security-engineer","json_url":"https://alion.io/job/sourcefit-senior-security-engineer.json","meta":{"generated_at":"2026-11-07T03:42:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8953,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50085},"rest":"https://alion.io/mcp/rest/get_company?id=50085"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsourcefit-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsourcefit-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsourcefit-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sourcefit-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsourcefit-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3795390}},{"tool":"search_jobs","arguments":{"company":"sourcefit.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3795390},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}