Senior Associate, Security Engineering

As a Senior Associate in Security Engineering at PDAX, you join a leading crypto firm in the Philippine market with a mission to empower Filipinos to grow their wealth through blockchain technology. You support a maturing security operations function across monitoring, incident response, and defensive operations, working alongside senior engineers and a Managed Security Operations provider to maintain safety and reliability for our users.

What you'll do

• Monitor security alerts from SIEM, EDR/XDR, and cloud security tools, perform initial triage, and escalate suspicious activity to senior team members
• Validate alerts from the Managed Security Operations (MSOC) provider and coordinate with them to ensure alerts, tickets, and escalations follow defined communication channels
• Assist senior engineers during security incidents such as phishing, malware, and account compromise by collecting logs, indicators of compromise (IOCs), and basic forensic data
• Follow incident response playbooks, document actions taken, and help track incident timelines, handoffs, and follow-ups between MSOC and internal teams
• Support maintenance of security monitoring coverage and log onboarding, tune alerts to reduce false positives, and verify that critical systems are properly monitored
• Assist in internal vulnerability assessments and basic attack simulations, track findings from VAPT exercises, and support remediation tracking and retesting validation
• Maintain incident response playbooks and runbooks, document incident learnings and recurring issues, and participate in tabletop exercises and security drills

What you bring

• 2-4 years of experience in security engineering, cloud security, or detection and response, with demonstrated ownership of investigations and security improvements
• Practical experience investigating AWS security events including CloudTrail, GuardDuty alerts, Security Hub and Inspector findings, and WAF logs, with the ability to identify exposed services, excessive IAM permissions, and compromised credentials
• Ability to investigate phishing, endpoint compromise, credential theft, and suspicious cloud activity; correlate evidence across systems; and execute containment and recovery
• Experience building and tuning SIEM/EDR detections, reducing false positives, identifying visibility gaps, and developing actionable response playbooks
• Proficiency in Python, JavaScript/TypeScript, or a comparable language to integrate APIs, enrich alerts, automate investigations, and reduce manual work
• Ability to assess exploitability and business impact of vulnerabilities, work with Engineering on remediation, and verify fixes across application dependencies, endpoints, and cloud infrastructure
• Working knowledge of least privilege, SSO, MFA, privileged access, secrets management, API authorization, and session security
• Ability to drive issues through resolution and communicate findings, business impact, and recommended actions clearly to technical teams and management

Nice to have

• Experience with CrowdStrike, Wazuh, Trend Micro, JumpCloud, or equivalent platforms
• Experience integrating SAST, DAST, dependency scanning, and secrets scanning into CI/CD pipelines
• Experience building AI-assisted security workflows, with evidence validation, controlled permissions, and human approval for consequential actions

About PDAX

PDAX is one of the first crypto firms in the Philippine market, on a mission to empower all Filipinos to grow their wealth through blockchain technology. The company prioritizes safety, ease of access, and reliability for its users and ecosystem.