Senior Cybersecurity Engineer

🔥 0 minutes ago

🇵🇭 Philippines – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• No salary listed.

Apply Now

Check your resume score

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

Voltex Electrical Accessories

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2001

🏭 Manufacturing

🔧 Hardware

Manufacturing • Hardware

Voltex Electrical Accessories is Australasia's fastest-growing electrical brand, catering to both Australia and New Zealand. It provides a range of electrical products and accessories, supporting various regional customer needs via its dedicated websites and contact numbers. Known for its rapid growth in the electrical sector, Voltex is becoming a key player in the market, offering quality products and services to its clientele.

📋 Description

• Manually test public-facing and internal web applications and APIs, including authenticated journeys, authentication, sessions, object and role authorization, tenant boundaries, and business-logic abuse • Use scanners to support, not replace, manual investigation • Assess mobile apps, including local storage and logging, authentication and sessions, network trust, platform interactions, and backend APIs • Review source code, configuration, and designs with developers • Build threat modelling, security checks, and regression tests into the development lifecycle, including code, dependency, and secrets scanning in CI/CD • Document reproducible findings and business impact, agree remediation owners and dates, support root-cause fixes, and independently retest fixes • Track security coverage, overdue risks, and time-bound risk exceptions with the Head of Technology • Agree written testing scope and authorization, including environments, test accounts and data, production safeguards, and stop conditions • Protect customer information and avoid disruption during testing • Own security posture in Microsoft Entra ID and Microsoft Defender, including Conditional Access, MFA coverage, privileged access, and alert routing • Run incident response from detection through post-incident review • Review security-relevant application, access, network, and infrastructure changes before release • Act as named security approver for high-risk changes; arrange separate review of own high-risk changes and escalate unresolved release risks • Enforce secrets and identity hygiene using Azure Key Vault, managed identities, no embedded credentials, and least privilege • Investigate account takeover and fraud signals with QA and Customer Service teams • Run security awareness and phishing resistance programmes for Voltex staff

🎯 Requirements

• Proven, hands-on ability in application security testing and driving fixes through retest • Web and API security experience investigating and validating weaknesses in authenticated websites, web apps, and APIs, including authorization and business logic • Experience using an intercepting proxy such as Burp Suite or an equivalent tool • Hands-on assessment of mobile-client security and backend APIs • Ability to read source code and configuration, explain root causes, work with developers on fixes, and verify retests and regression coverage • Experience with .NET/IIS or strong transferable experience • Experience securing Microsoft Azure workloads and hybrid estates, including on-premises servers and Active Directory • Entra ID administration, Conditional Access design, MFA rollout, and privileged access management • Experience with Microsoft Defender and EDR platforms; CrowdStrike experience • Experience with Intune device management • Experience with firewalls, segmentation, and SASE/SD-WAN environments; Cato experience • Incident response experience covering detection, containment, and post-incident write-ups • Experience using OWASP guidance and ASD Essential Eight or a comparable framework • Ability to communicate risk in plain business terms • Ability to work remotely across AU/NZ time zones and operate independently as the sole security specialist • Nice to have: AZ-500, SC-200, or equivalent experience • Nice to have: experience securing Databricks or governing AI tool and agent access • Nice to have: phishing simulation and security awareness programme experience • Nice to have: deeper native mobile testing, reverse engineering, or commissioning and validating specialist penetration tests

🏖️ Benefits

• Fully WFH with flexible working hours • Paid Parental Leave • Annual and sick Leave • 20 Service Inventive Leave (SIL) days per year • Healthcare - HMO Coverage for up to four (4) dependants • Monthly food allowance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume