About this role
PROTECTION AND IMMUNITY, STARTING DAY ONE!
Grow your career while being supported with comprehensive HMO as early as your Day 1 with us!
---
Awesome perks await in #WeAreTGT: EASTWOOD!
- Health & Wellbeing: HMO from Day 1 (with dependent & dental coverage), psychiatric & medicine support, flu shots, life insurance
- Rewards & Recognition: 24 PTOs (with conversion), annual appraisals, awards, referral programs, company events
- Growth & Perks: Free daily meals & treats, career development, certifications, overseas training, vibrant office culture
- Vibrant City Location: Work in Eastwood (MDC100)
---
As a Senior Security Engineer
You'll be responsible for reviewing and improving the security posture of client Microsoft 365 and Azure environments, delivering security configuration projects, and responding to security incidents escalated by our 24/7 SOC.
---
Ideal Technical Profile
- 3–5 years in IT, with 2–3 years hands-on Microsoft 365, Entra ID, and Intune administration (MSP experience preferred).
- Configures Conditional Access , Intune , and Exchange Online independently from documented procedures.
- Has run Secure Score-style reviews and handled BEC and phishing incidents using playbooks.
- Can read, run, and safely modify PowerShell scripts.
- Strong problem-solving and decision-making skills.
---
Your Impact Starts Here
Security Posture Review & Improvement
- Review client tenants against Microsoft Secure Score and best practice: MFA and Conditional Access coverage, legacy authentication, admin role sprawl, device compliance, email security (SPF, DKIM, DMARC, anti-phishing), external sharing, app consents, and stale accounts.
- Confirm each finding with evidence from the live tenant, separating real gaps from false positives.
- Prioritize findings by risk and effort, recommend fixes, and implement approved improvements.
- Re-measure after changes and track each client's posture over time.
Security Confirgurations & Projects
- Entra ID : Conditional Access (report-only, pilot, then enforce), MFA and passkeys, privileged access, guest access.
- Intune : compliance and configuration policies, app deployment, remediation scripts, device hardening.
- Exchange Online & Purview : mail security, retention and litigation hold, mailbox permissions.
- Hybrid identity & Azure : Active Directory / Entra Connect, Azure network exposure and access.
- SecureIT services: deploy and maintain DivergeIT security tools across clients (SASE agents, phishing-report add-ins, pen-test sensors, endpoint protection).
- Access reviews: user access and admin role reviews; offboarding protection for departing users.
Incident Triage & Response
- Business email compromise: review sign-ins for token theft and AiTM attacks; revoke sessions and reset credentials and MFA; remove malicious inbox rules, forwarding, and app consents; identify fraudulent outbound mail.
- Ransomware & malware: isolate affected devices, disable compromised accounts, scope the spread, confirm backups, and escalate immediately.
- Phishing: triage reported messages, identify who received or clicked, purge the message tenant-wide, and block the sender.
- Account compromise: investigate risky sign-ins, suspicious role changes, and MFA fatigue attacks
- Escalate high-severity incidents (ransomware, BEC involving payments, admin compromise, data breach) to the Director of Security right away, with a written summary.
- Document a timeline, indicators of compromise, actions taken, and recommended hardening.
---
MORE THAN JUST A JOB
Headquartered across the Philippines' most dynamic cities in BGC, Eastwood, Alabang, and Cebu, and now expanding internationally with our first overseas office in Sri Lanka, we're building a workplace that puts people first.
---