URGENT HIRING: Security Engineer (MSP SOC) – Night Shift | BGC Hybrid

About the role
We’re filling a dedicated offshore security seat for a North American managed services provider. You’ll run day-to-day security operations across multiple client environments: alert triage and incident response, identity and endpoint hardening, vulnerability management, and the compliance and audit evidence clients rely on. You’ll investigate an alert at 9pm and write the risk register entry for it the next morning.

Alongside operations, you’ll deliver client cybersecurity projects focused on security uplift and compliance.

We want someone who’ll own this seat for the long term.

Security uplift and compliance projects

• Working through third-party cybersecurity audit findings and maturity assessments, item by item, to closure

• Checking audit register status against real platform evidence and correcting items that are reported wrong

• Building uplift roadmaps that separate configuration work from licensing and budget decisions

• Identity hardening: Conditional Access and MFA enforcement, privileged access, access reviews, guest account cleanup

• Remediating end-of-life systems, verifying backups and restore readiness, and running phishing simulation programmes

• Producing evidence packs and findings reports for client leadership

Schedule and setup

• Night shift (Manila time)

• First month fully onsite in BGC for onboarding, then hybrid with Monday and Tuesday onsite

• On standby for after-hours incidents, with a standby allowance on top of salary

Requirements

• 5+ years in security operations, including at least 2 years at an MSP or MSSP supporting multiple clients

• Incident triage and response: phishing and email security investigations, account compromise, endpoint containment and remediation

• Hands-on with the Microsoft security stack: Defender, Entra ID (Conditional Access, MFA, Identity Protection, PIM) and Microsoft Sentinel or a comparable SIEM

• Production experience with EDR/MDR, DNS and web filtering, and firewall log review

• Vulnerability management: scanning, prioritisation and tracking remediation to closure

• Compliance and audit delivery against ISO/IEC 27001, NIST CSF or similar: control mapping, policy writing, risk registers and evidence packs

• Track record of delivering security uplift or audit remediation projects for clients, from findings through to verified closure

• Security hardening and backup security posture reviews

• Clear written English. You’ll write client-facing findings and reports

• Nice to have: Security+, SC-200, CySA+ or equivalent, and VAPT experience