Voltex Electrical

Manufacturer-direct online supplier of electrical components

Senior Cybersecurity Engineer

Security Engineering & Architecture +1Posted on Nov 11

Full-timeRemote in Philippines

About the Job

Requirements

Personally investigate and validate weaknesses in authenticated websites, web applications, and APIs, including authorization and business logic, using Burp Suite or an equivalent intercepting proxy.
Have hands-on experience assessing mobile-client security and backend APIs on relevant platforms, and understand the limits of personal testing.
Read source code and configuration, explain root causes, work with developers on fixes, and verify retests and regression coverage; transferable experience is acceptable for the .NET/IIS web stack.
Secure Microsoft Azure workloads and hybrid environments, including cloud resources, on-premises servers, and Active Directory.
Administer Entra ID, design Conditional Access, roll out multi-factor authentication, and manage privileged access.
Use Microsoft Defender and endpoint detection and response platforms such as CrowdStrike, and manage devices with Intune.
Work with firewalls, network segmentation, and SASE/SD-WAN environments such as Cato.
Handle incident detection, containment, and clear post-incident write-ups.
Use OWASP guidance to structure application testing and the ASD Essential Eight or a comparable framework to translate security controls into practical work.
Communicate risk in business terms, work remotely across Australian and New Zealand time zones, and operate independently as the sole security specialist.
Demonstrate sound judgment across the wider estate without requiring expert-level experience with every named product.

Responsibilities

Manually test public-facing and internal web applications and APIs, including authenticated journeys, authentication, sessions, object and role authorization, tenant boundaries, and business-logic abuse; use scanners to support rather than replace manual investigation.
Assess mobile applications on the platforms in use, including local storage and logging, authentication and sessions, network trust, platform interactions, and backend APIs; identify when deeper specialist testing is needed.
Review relevant source code, configuration, and designs with developers; build practical threat modelling, security checks, and regression tests into the development lifecycle, including code, dependency, and secrets scanning in continuous integration and continuous delivery.
Document reproducible findings and business impact, agree remediation owners and dates, help developers fix root causes, and independently retest fixes; track coverage, overdue risks, and time-bound risk exceptions with the Head of Technology.
Agree written scope and authorization before testing, including environments, test accounts and data, production safeguards, and stop conditions; protect customer information and avoid disruption.
Own security posture in Microsoft Entra ID and Microsoft Defender, including Conditional Access, multi-factor authentication coverage, privileged access, and alert routing.
Run incident response for security events from detection through post-incident review.
Review security-relevant application, access, network, and infrastructure changes before release; act as the named security approver for high-risk changes, arrange separate review of personal high-risk changes, and escalate unresolved release risks to the Head of Technology.
Enforce secrets and identity hygiene for people, workloads, and AI agents, including Azure Key Vault, managed identities, avoiding embedded credentials, and applying least privilege to every integration.
Investigate account takeover and fraud signals with Quality Assurance and Customer Service teams, and close the gaps identified.
Run security awareness and phishing-resistance activities for staff.

Desired Qualifications

Security certifications such as AZ-500 or SC-200, or equivalent experience.
Experience securing data platforms such as Databricks or governing AI tool and agent access.
Experience running phishing simulation and security awareness programmes.
Deeper native mobile testing, reverse engineering, or experience commissioning and validating specialist penetration tests.

Senior Cybersecurity Engineer

Voltex Electrical · Philippines (Remote) · Full-time · Posted 2026-11-11

Workplace: remote

Description

Senior Cybersecurity Engineer

Philippines (remote) · Full-time · Reports to the Head of Technology

About Voltex

Voltex Electrical is an electrical wholesale distributor that serves electricians across Australia and New Zealand. We sell direct to the trade, and our customers order from us every week. The business is growing fast, and technology is central to how we get there.

The Role

You will be part of a high-performance team who operate in a fast paced environment, this is a hands-on engineering role. Security testing of websites, web applications, APIs, and mobile apps is a core responsibility alongside our identity, endpoint, cloud, and network security. You find weaknesses, rank them by business risk, and fix them or work with the teams that own the systems to verify the fix.

You sit outside the infrastructure team to provide independent security challenge. Your job in year one: make the business measurably safer and give the Head of Technology an evidence-based view on priorities, residual risk, and where specialist support or additional capacity is needed.

What you will do

Manually test public-facing and internal web applications and APIs, including authenticated journeys, authentication, sessions, object and role authorization, tenant boundaries, and business-logic abuse. Use scanners to support, not replace, manual investigation.
Assess mobile apps on the platforms we use, including local storage and logging, authentication and sessions, network trust, platform interactions, and their backend APIs. Identify where deeper specialist testing is needed.
Review relevant source code, configuration, and designs with developers. Build practical threat modelling, security checks, and regression tests into the development lifecycle, including code, dependency, and secrets scanning in CI/CD.
Document reproducible findings and business impact, agree remediation owners and dates, help developers fix root causes, and independently retest their fixes. Track coverage, overdue risks, and time-bound risk exceptions with the Head of Technology.
Agree written scope and authorisation before testing, including environments, test accounts and data, production safeguards, and stop conditions. Protect customer information and avoid disruption.
Own security posture in Microsoft Entra ID and Microsoft Defender: Conditional Access, multi-factor authentication coverage, privileged access, and alert routing.
Run incident response for security events, from detection through to the post-incident review.
Review security-relevant application, access, network, and infrastructure changes before release, and act as the named security approver for high-risk changes. Arrange separate review of your own high-risk changes and escalate unresolved release risks to the Head of Technology.
Enforce secrets and identity hygiene for people, workloads, and AI agents: Azure Key Vault, managed identities, no embedded credentials, least privilege for every integration.
Investigate account takeover and fraud signals with our QA and Customer Service teams, and close the gaps they expose.
Run security awareness and phishing resistance for Voltex staff.

How to Apply

Send your CV and a short, sanitised example of a web, API, or mobile vulnerability you personally investigated. Explain what you tested, the business impact, your role in remediation, and how the fix was retested. Do not include client data or confidential code. Be ready to walk through your evidence and an authorised practical scenario at interview. Alternatively applying through Linkedin is fine as well

Requirements

What you bring

We value proven, hands-on ability more than any one certification. Application testing and the ability to drive fixes through retest are essential. You should be able to show:

Web and API security — personally investigating and validating weaknesses in authenticated websites, web apps, and APIs, including authorisation and business logic, using an intercepting proxy such as Burp Suite or an equivalent tool.
Mobile application security — hands-on assessment of mobile-client security and backend APIs on relevant platforms, with a clear understanding of your testing limits.
Code review and remediation — reading source and configuration, explaining root causes, working with developers on fixes, and verifying retests and regression coverage. Our web stack includes .NET/IIS; strong transferable experience is welcome.
Cloud and on-premises security — securing Microsoft Azure workloads and hybrid estates — cloud resources alongside on-premises servers and Active Directory.
Identity — Entra ID administration, Conditional Access design, MFA rollout, and privileged access management.
Endpoints — Microsoft Defender and EDR platforms (we run CrowdStrike), plus device management with Intune.
Network security — firewalls, segmentation, and SASE/SD-WAN environments (we run Cato).
Incident response — detection, containment, and clear post-incident write-ups.
Frameworks — using OWASP guidance to structure application testing and the ASD Essential Eight or a comparable framework to turn broader security controls into practical work.

You communicate risk in plain business terms, work well remotely across AU/NZ time zones, and can operate independently as the sole security specialist. We expect sound judgement across the wider estate, not expert-level experience with every named product.

Nice to have

Security certifications such as AZ-500, SC-200, or equivalent experience.
Experience securing data platforms (we run Databricks) or governing AI tool and agent access.
Experience running phishing simulation and security awareness programmes.
Deeper native mobile testing, reverse engineering, or experience commissioning and validating specialist penetration tests.

Benefits

Fully WFH with flexible working hours
Paid Parental Leave
Annual and sick Leave - 20 Service Inventive Leave (SIL) days per year
Healthcare - HMO Coverage for up to four (4) dependants
Monthly food allowance

Apply

Apply at Voltex Electrical

About the Company

Voltex Electrical

Manufacturer-direct online supplier of electrical components

Voltex Electrical Accessories designs, manufactures, and sells its own branded electrical and data products directly to licensed Australian electricians through an online platform. Its products, including outlets, switches, LED downlights, and circuit protection, are shipped from Voltex warehouses after contractors open accounts on the website or mobile app. The company bypasses traditional retail and wholesale channels to offer direct-to-contractor pricing, backed by a 25-year warranty and a 365-day no-questions-asked return policy that covers replacement, contractor time, and related costs. Its goal is to grow by providing reliable products and strong service while maintaining a low-overhead, online-only business model.

Company size: 1-10
Company stage: Not listed
Total funding: Not listed
Headquarters: Peachtree Corners, GA
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Voltex Electrical

See more jobs