Security Engineer (Hybrid)
HelloFresh · Manila, Manila, Philippines
What the posting says
Each fact was read from this posting and checked:Statedin the posting, quotedConflictsposted two ways, both shownNot mentionedwe looked; it is not there
- Work arrangementStated
- Hybrid
- ShiftStated
- rotating, on call
- Open to working on-call in rotational shifts
from the posting - ExperienceStated
- 2-5 years
Not mentioned in this posting
We read the whole posting. These are not in it. Not a no: ask the recruiter, in your own words.
- PayNot mentioned
- The posting does not say
- Employment typeNot mentioned
- The posting does not say
- EducationNot mentioned
- The posting does not say
- Visa sponsorshipNot mentioned
- The posting does not say
Requirements, each with its sentence from the posting
These are the employer’s words. The index does not judge whether you meet them.
- SOC monitoring experiencerequired
A minimum of 2 years of experience working in mature SOC environments
from the posting - Security monitoring and incident response in AWSrequired
Security monitoring and incident response experience in public cloud environments such as AWS
from the posting - Cloud SIEM and SOAR platformsrequired
Experience with cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools
from the posting - DDoS mitigation toolsrequired
cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools
from the posting - Layer-7 Web-based perimeter security controlsrequired
Layer-7 Web-based perimeter security controls
from the posting - Network intrusion methods and containmentrequired
Understanding of network intrusion methods, network containment, segregation techniques
from the posting - Sandboxes and IDS/IPS systemsrequired
technologies such as Sandboxes and Intrusion Detection/Prevention Systems (ID/PS)
from the posting - EDR and EPP solutionsrequired
Ability to operate EDR, EPP and Device Management solutions
from the posting - Programming for automationrequired
Decent programming skills to enable data processing, IaC and security automations
from the posting - Communication and reportingrequired
Good communication and reporting skills
from the posting - On-call rotational shift workrequired
Open to working on-call in rotational shifts
from the posting - Log analysis toolspreferred
Experience with log analysis stacks like Elastic Search, Splunk/SumoLogic
from the posting
Read the full posting as the employer wrote it
The Role
At HelloConnect, you will be part of a dynamic team in (Inoza tower, BGC | Exxa tower, Quezon City | Puerto Princesa, Palawan) that embraces innovation and leverages advanced technology to create exceptional experiences. Our culture is built on collaboration, continuous learning, and a commitment to excellence. You’ll have the opportunity to work on impactful projects, develop your skills, and grow within a supportive environment that values diverse perspectives and experiences.
In this role, you will take on a key responsibility in improving the HelloFresh Security Logging & Monitoring Program by maturing the tools, processes and playbooks to reduce dwell time (indicators of which would be lowered MTTD&R), contributing to our ongoing efforts to drive business success and enhance customer satisfaction.
We’re looking for passionate individuals who can bring their unique skills and ideas to the table. Even if you don't meet every requirement but believe you’d excel in this role, we’d love to hear from you!
What you’ll do
- Responsible for SOC monitoring, use-case building, triage and advisory using cloud-native SIEM platforms
- Conduct initial triage of security events and incidents and document progress throughout the Incident Response Lifecycle
- Automate, optimize, automate and operate modern security solutions like EDR/EPPs and conventional Firewalls, IDS/IPS, Email Security, VPN, and MDM tools
- Leverage premium and open-source threat intel feeds to regularly sweep environments against rising APT campaigns
- Prepare status reports and follow up with the stakeholders through Jira and Incident Mgmt. Platform to close the remediation loop
- Facilitate efficient Incident Detection and Response in AWS cloud and enterprise IT environments
What you’ll bring
- A minimum of 2 years of experience working in mature SOC environments
- Security monitoring and incident response experience in public cloud environments such as AWS
- Experience with cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools and Layer-7 Web-based perimeter security controls
- Understanding of network intrusion methods, network containment, segregation techniques and technologies such as Sandboxes and Intrusion Detection/Prevention Systems (ID/PS)
- Ability to operate EDR, EPP and Device Management solutions as per best security practices
- Decent programming skills to enable data processing, IaC and security automations
- Good communication and reporting skills
- Experience with log analysis stacks like Elastic Search, Splunk/SumoLogic
- Open to working on-call in rotational shifts
What we offer
- Competitive Compensation: Beyond the standard package, we offer perks like Long Service Benefits (anniversary bonus) to recognize and celebrate your dedication
- Wellness & Perks: We prioritize your well-being by offering mental health support, HMO medical coverage, generous leave benefits plus life insurance for both you and your family's peace of mind
- Growth Opportunities: Invest in your personal development with an annual learning & development budget, plus access to the 360 Learning platform
- Dynamic Environment: Join a rapidly growing global Business Process Outsourcing company, where you'll collaborate with a diverse community spanning across multiple continents and cultures
- Work-Life Balance: Enjoy a healthy balance between your professional and personal life, with a supportive environment that prioritizes your well-being and personal time
Are you up for the challenge?
The first step to your new role starts here. Send in your application, along with your salary expectations and preferred start date. Our dedicated team will thoroughly review your details. We are excited to connect with you soon!
#LI-Hybrid
#LI-DNI
The posting text is reproduced as the employer wrote it; the index adds nothing to it.