Engineer, Information Security
At a glance
Mid-level Security Operations & Analysis role at Athenago. Remote, Philippines · full-time.
Pay not stated Security Operations & Analysis salary
remoteroles summary, based on the employer's posting.
What you'll do
- Build and refine access controls for company apps and infrastructure, including SSO, MFA, role-based access and privileged workflows
- Secure company devices across macOS and Windows by improving hardening, monitoring, protection and response
- Expand security logs and detections across identity, endpoint and SaaS systems, then support investigations and remediation
- Create scripts and integrations that reduce manual security work and strengthen operational controls
- Support compliance evidence, technical control documentation, risk reviews and internal security guidance
What you bring
- At least four years in information security, security engineering, IT security or a related area
- Hands-on experience administering enterprise identity providers and managing endpoint security tools
- You understand identity protocols and controls such as SAML, OIDC, OAuth, SCIM, MFA and RBAC
- You can script or automate with Python, Bash, PowerShell or a comparable language
- Experience in cloud-first workplaces and familiarity with monitoring and incident-response processes
Who this fits
This mid-level role suits a hands-on engineer who can improve security while accounting for employees’ day-to-day needs. You’ll work across IT, Engineering, Infrastructure, HR and Compliance. The role is remote and based in Quezon City, Philippines.
From the employer
About the Role
We are looking for an Information Security Engineer to help scale and mature our corporate security program in a fast-moving, high-growth environment. This role will focus on identity and access management, endpoint security, SaaS security, corporate infrastructure security, and security operations enablement.
The ideal candidate is hands-on, automation-minded, and comfortable partnering across IT, Engineering, Infrastructure, HR, and Compliance teams to improve security controls while maintaining a strong employee experience.
You will help design and operate security systems that protect corporate assets, secure employee access, improve visibility, and reduce organizational risk across cloud-first and SaaS-heavy environments.
Responsibilities
Identity & Access Management
Design, implement, and improve identity and access management controls across enterprise applications and infrastructure.
Manage and optimize SSO, MFA, lifecycle management, conditional access, RBAC, and privileged access workflows.
Partner with IT and business stakeholders to implement least-privilege access models.
Support onboarding, offboarding, and automated provisioning/deprovisioning workflows.
Conduct periodic access reviews and help drive remediation efforts.
Improve authentication security and identity posture across corporate systems.
Corporate Security Engineering
Secure and manage corporate endpoints across macOS, Windows, and cloud-managed environments.
Improve endpoint visibility, hardening, monitoring, and response capabilities.
Help implement and tune modern endpoint protection, browser security, device trust, and web/data protection controls.
Partner with Infrastructure and IT teams on secure configuration standards and operational improvements.
Support security initiatives related to enterprise SaaS applications and collaboration platforms.
Assist with vendor and third-party security evaluations related to enterprise tooling.
Security Operations & Monitoring
Assist with security monitoring, detection engineering, and incident response activities.
Improve log visibility and telemetry coverage across identity, endpoint, and SaaS platforms.
Build and maintain detections, alerts, and operational playbooks.
Participate in incident investigations and post-incident remediation efforts.
Help operationalize security metrics and reporting.
Automation & Engineering
Build automations and integrations that improve security operations efficiency.
Develop scripts and workflows to reduce manual processes.
Partner with Engineering and Infrastructure teams to improve security guardrails and operational maturity.
Contribute to infrastructure-as-code and policy-as-code initiatives where applicable.
Compliance & Security Programs
Support security compliance initiatives such as SOC 2, ISO 27001, or similar frameworks.
Help document technical controls, processes, and operational procedures.
Participate in risk assessments and remediation tracking.
Contribute to security awareness and internal enablement efforts.
Qualifications
Required
4+ years of experience in information security, security engineering, IT security, or related fields.
Experience administering enterprise identity providers and access management systems.
Experience with endpoint management and endpoint security tooling.
Familiarity with security monitoring, logging, and incident response workflows.
Strong understanding of authentication protocols and identity security concepts, including SAML, OIDC, OAuth, SCIM, MFA, conditional access, and RBAC.
Experience working in cloud-first environments using modern SaaS platforms.
Strong scripting or automation experience using Python, Bash, PowerShell, or similar.
Ability to balance security requirements with operational usability and business needs.
Strong communication and cross-functional collaboration skills.
Preferred
Experience securing macOS environments at scale.
Experience with modern browser security and data protection technologies.
Experience with cloud-native security monitoring or SIEM platforms.
Familiarity with MDM/UEM platforms, EDR solutions, identity governance, and SaaS security tools.
Experience implementing automation around identity lifecycle management.
Familiarity with infrastructure-as-code or cloud security practices.
Experience in high-growth startup or enterprise environments.
Security certifications such as Security+, CISSP, GIAC, identity provider certifications, endpoint management certifications, or equivalent.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.