Engineer, Information Security
Athena US · Quezon City
About the Role
We are looking for an Information Security Engineer to help scale and mature our corporate security program in a fast-moving, high-growth environment. This role will focus on identity and access management, endpoint security, SaaS security, corporate infrastructure security, and security operations enablement.
The ideal candidate is hands-on, automation-minded, and comfortable partnering across IT, Engineering, Infrastructure, HR, and Compliance teams to improve security controls while maintaining a strong employee experience.
You will help design and operate security systems that protect corporate assets, secure employee access, improve visibility, and reduce organizational risk across cloud-first and SaaS-heavy environments.
Responsibilities
Identity & Access Management
Design, implement, and improve identity and access management controls across enterprise applications and infrastructure.
Manage and optimize SSO, MFA, lifecycle management, conditional access, RBAC, and privileged access workflows.
Partner with IT and business stakeholders to implement least-privilege access models.
Support onboarding, offboarding, and automated provisioning/deprovisioning workflows.
Conduct periodic access reviews and help drive remediation efforts.
Improve authentication security and identity posture across corporate systems.
Corporate Security Engineering
Secure and manage corporate endpoints across macOS, Windows, and cloud-managed environments.
Improve endpoint visibility, hardening, monitoring, and response capabilities.
Help implement and tune modern endpoint protection, browser security, device trust, and web/data protection controls.
Partner with Infrastructure and IT teams on secure configuration standards and operational improvements.
Support security initiatives related to enterprise SaaS applications and collaboration platforms.
Assist with vendor and third-party security evaluations related to enterprise tooling.
Security Operations & Monitoring
Assist with security monitoring, detection engineering, and incident response activities.
Improve log visibility and telemetry coverage across identity, endpoint, and SaaS platforms.
Build and maintain detections, alerts, and operational playbooks.
Participate in incident investigations and post-incident remediation efforts.
Help operationalize security metrics and reporting.
Automation & Engineering
Build automations and integrations that improve security operations efficiency.
Develop scripts and workflows to reduce manual processes.
Partner with Engineering and Infrastructure teams to improve security guardrails and operational maturity.
Contribute to infrastructure-as-code and policy-as-code initiatives where applicable.
Compliance & Security Programs
Support security compliance initiatives such as SOC 2, ISO 27001, or similar frameworks.
Help document technical controls, processes, and operational procedures.
Participate in risk assessments and remediation tracking.
Contribute to security awareness and internal enablement efforts.
Qualifications
Required
4+ years of experience in information security, security engineering, IT security, or related fields.
Experience administering enterprise identity providers and access management systems.
Experience with endpoint management and endpoint security tooling.
Familiarity with security monitoring, logging, and incident response workflows.
Strong understanding of authentication protocols and identity security concepts, including SAML, OIDC, OAuth, SCIM, MFA, conditional access, and RBAC.
Experience working in cloud-first environments using modern SaaS platforms.
Strong scripting or automation experience using Python, Bash, PowerShell, or similar.
Ability to balance security requirements with operational usability and business needs.
Strong communication and cross-functional collaboration skills.
Preferred
Experience securing macOS environments at scale.
Experience with modern browser security and data protection technologies.
Experience with cloud-native security monitoring or SIEM platforms.
Familiarity with MDM/UEM platforms, EDR solutions, identity governance, and SaaS security tools.
Experience implementing automation around identity lifecycle management.
Familiarity with infrastructure-as-code or cloud security practices.
Experience in high-growth startup or enterprise environments.
Security certifications such as Security+, CISSP, GIAC, identity provider certifications, endpoint management certifications, or equivalent.