DataOne

Operates AI-focused, giga-scale data centers

Cyber Security Operations Center Engineer

Security Engineering & Architecture +1Confirmed live in the last 24 hours

Full-timeDavao City, Davao del Sur, PhilippinesNo salary listedIn-person

About the Job

Requirements

Practical, hands-on engineering knowledge of Wazuh for SIEM and host intrusion detection.
Practical, hands-on engineering knowledge of Bitdefender GravityZone for endpoint protection.
Practical, hands-on engineering knowledge of Fortinet FortiGate and FortiWAF for firewall and web application firewall functions.
Practical, hands-on engineering knowledge of NetBird and WireGuard for zero-trust access and VPN.
Practical, hands-on engineering knowledge of TheHive and Cortex for security orchestration and case management.
Practical, hands-on engineering knowledge of MISP, Shadowserver, and SOCRadar for threat intelligence.
Practical, hands-on engineering knowledge of OpenVAS and VulnTracker for vulnerability assessment.
Practical, hands-on engineering knowledge of BloodHound and PingCastle for Active Directory auditing.
Practical, hands-on engineering knowledge of Suricata for network intrusion detection.
Practical, hands-on knowledge of anti-DDoS.
At least 2–3 years of experience in a SOC engineering, systems engineering, or infrastructure security role.
Professional fluency in written and spoken English.
Proven ability to work with non-technical teams such as Compliance and Legal and deliver clear, actionable data.

Responsibilities

Focus operations on threat detection, incident response, and security infrastructure engineering.
Collect, organize, and provide technical evidence, log extracts, and vulnerability reports to the compliance team for group audits.
Maintain, tune, and optimize Wazuh for central logging, file integrity monitoring, and host intrusion detection across group infrastructure.
Manage and deploy Bitdefender GravityZone for endpoint protection, threat detection, and automated host isolation during incidents.
Configure and monitor Fortinet next-generation firewalls and web application firewalls for perimeter defense and web application security.
Manage network intrusion detection systems using Suricata.
Administer and secure remote infrastructure access using NetBird and WireGuard.
Orchestrate incident response workflows, incident management, and automated enrichment using TheHive and Cortex.
Aggregate and analyze indicators of compromise using MISP, Shadowserver, and SOCRadar.
Conduct scheduled vulnerability scanning and CVE tracking using OpenVAS and VulnTracker.
Execute risk scoring and map attack paths within Active Directory using BloodHound and PingCastle, then ensure follow-up actions with Active Directory administrators.
Assist in evaluating and implementing a future data loss prevention solution to protect sensitive data across DataOne and BSO systems.

Desired Qualifications

Prior experience securing data center environments, cloud infrastructure, or large-scale enterprise networks is highly valued.

Cyber Security Operations Center (CSOC) Engineer

DataOne · Davao City, Philippines · Full-time · Posted 2026-10-05

Workplace: on_site

Description

About the Role & Vision

We are expanding our global security capabilities to deliver continuous, expert-level security operations across all DATAONE and BSO systems. Built on a foundation of proven open-source technologies and enterprise solutions, our security infrastructure is operated by a highly skilled, follow-the-sun team based in Casablanca and Davao.

Orchestrated directly by the SOC Manager, our SOC team focuses purely on detection, response, and cyber security infrastructure management. While the team does not manage regulatory compliance directly, you will act as the technical enabler for our governance goals by providing all necessary technical evidence and reports to the compliance team to ensure successful audits.

Key Responsibilities

Core Focus: Dedicate operations entirely to threat detection, incident response, and security infrastructure engineering.
Audit & Compliance Support: Collect, organize, and provide all required technical evidence, log extracts, and vulnerability reports to the compliance team to guarantee successful group audits.
SIEM & Log Management: Maintain, tune, and optimize Wazuh for central logging, File Integrity Monitoring (FIM), and Host Intrusion Detection (HIDS) across all Group infrastructure.
Endpoint Defense: Manage and deploy Bitdefender GravityZone for endpoint protection, threat detection, and automated host isolation during incidents.
Perimeter & Network Security: Configure and monitor Fortinet NGFW/WAF for perimeter defense and web application security; manage network intrusion detection systems using Suricata.
Zero Trust Architecture (ZTA): Administer and secure remote infrastructure access utilizing NetBird and WireGuard.
Incident Response & Automation (SOAR): Orchestrate incident response workflows, incident management, and automated enrichment using TheHive and Cortex.
Threat Intelligence & Vulnerability Management: Aggregate and analyze Indicators of Compromise (IoCs) via MISP, Shadowserver, and SOCRadar. Conduct scheduled scanning and CVE tracking using OpenVAS and VulnTracker.
Active Directory Auditing: Execute risk scoring and map complex attack paths within Active Directory using BloodHound and PingCastle, ensure follow up actions with AD Admins
Data Protection: Assist in evaluating and implementing a future Data Loss Prevention (DLP) solution to protect sensitive data across DataOne and BSO systems.

Requirements

Required Technical Tooling

Practical, hands-on engineering knowledge of the following technologies:

SIEM / HIDS: Wazuh
EDR / EPP: Bitdefender GravityZone
Firewall / WAF: Fortinet (FortiGate / FortiWAF)
ZTA / VPN: NetBird, WireGuard
SOAR / Case Management: TheHive, Cortex
Threat Intel: MISP, Shadowserver, SOCRadar
Vulnerability Assessment: OpenVAS, VulnTracker
AD Auditing: BloodHound, PingCastle
NIDS: Suricata
Anti DDOS

Qualifications & Requirements

Experience: Minimum of 2–3 years of experience in a SOC Engineering, Systems Engineering, or Infrastructure Security role.
Language: Professional fluency in English (written and spoken) is mandatory for collaborating across global sites and creating technical audit evidence.
Datacenter/Enterprise Experience: Prior experience securing data center environments, cloud infrastructure, or large-scale enterprise networks is highly valued.
Collaboration Skills: Proven ability to work alongside non-technical teams (like Compliance and Legal) to deliver clear, actionable data.

Apply

Apply at DataOne

About the Company

DataOne

Operates AI-focused, giga-scale data centers

DataOne builds and runs giga-scale data centers called AI Factories designed for high-density AI workloads. It provides end-to-end, build-to-suit infrastructure for large tech firms to train and operate power-intensive AI models, with on-site development and management of the facilities. The data centers use specialized, liquid-cooled systems that support 60–250 kW per rack and are paired with renewable energy, on-site power generation via fuel cells, closed-loop water cooling, and heat recycling to pursue net-zero consumption. DataOne differentiates itself through AI-specific, high-density infrastructure and sustainability-focused design, backed by BSO with an aim to expand Europe and the United States, including a 400MW Europe campus plan and a 350MW U.S. facility, targeting large-scale GPU hosting and hyperscale computing for enterprise AI needs.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Vineland, NJ
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at DataOne

See more jobs