Network and Endpoint Security Lead PH

Job Description

WE’RE HIRING: NETWORK & ENDPOINT SECURITY LEAD IN THE PHILIPPINES!

Excis is a global IT services leader, driven by innovation, collaboration, and a commitment to delivering secure, high-performance solutions.

We are seeking a highly skilled and proactive Network & Endpoint Security Lead to safeguard our organisation’s digital perimeter and endpoint environment against evolving cyber threats. This role will focus on strengthening security across firewalls, intrusion prevention systems, VPNs, and endpoint protection platforms, while driving advanced threat detection, secure access, and multi-factor authentication initiatives.

The successful candidate will play a key role in securing both on-premises and cloud-based infrastructure, ensuring integrated and consistent security controls across diverse environments. You will also lead efforts in vulnerability management, patching, and automation to enable rapid response and continuous monitoring. Oversight of Akamai CDN management will form part of this role, ensuring both performance and security at scale.

Join us for a rewarding career in a supportive, growth-oriented environment where people and performance go hand in hand.

• Client presence in 190+ countries
  
• 6000+ engineers globally
  
• 200+ enterprise clients
  

We foster an open, friendly, and collaborative culture where individual achievements contribute to overall team success. From solving complex security challenges to celebrating milestones, we put our people first.

Key Responsibilities:

• Provide L3 operational support for network security and endpoint security incidents, service requests, and changes.
  
• Monitor security-focused tools: firewalls, VPN gateways, web proxies, endpoint protection platforms, DDoS/WAF services, MFA systems.
  
• Management of Akamai CDN.
  
• Execute security patching, device health checks, and configuration updates for security platforms.
  
• Assist in the deployment and onboarding of security appliances and endpoint agents, following security baselines and compliance standards.
  
• Perform triage and troubleshooting of security, authentication, access, malware, and threat‑related incidents.
  
• Support secure remote access operations, including VPN provisioning, ZTNA processes, MFA troubleshooting, and access reviews.
  
• Assist in implementing and monitoring DDoS protection, web filtering, endpoint security policies, SSL inspection, and threat protection rules.
  
• Follow procedures for secure file transfer, encryption, DLP controls, and audit‑compliant partner onboarding.
  
• Participate in security-oriented maintenance such as firmware/security updates, rulebase reviews, and threat‑driven tuning.
  
• Maintain documentation of security incidents, policy changes, security devices, and endpoint inventories.
  
• Contribute to improving security operational processes, including recurring issue analysis and automation opportunities.
  
• Collaborate closely with SOC, Cybersecurity, IAM, and other Infrastructure teams on cross-functional security issues.
  
• Ensure compliance with security policies, audit requirements, vulnerability remediation schedules, and secure configuration standards.
  
• Maintain up-to-date knowledge of security technologies, threat landscapes, and vendor best practices.
  
• Participate in knowledge sharing, operational readiness, and security service reviews.
  
• Support backup restoration tests and DR drills related to security platforms.
  
• Escalate unresolved or high-impact security incidents according to the escalation matrix.
  
• Lead the L2 Network Security analysts and organize an On-Call rota for this area.
  
  

Required Skills & Qualifications:

• Advanced firewall expertise (Cisco, Palo Alto, Fortinet, Check Point, IBM Vyatta): policy design, HA, migrations, cleanup, and optimization.
  
• DDoS, WAF and CDN expertise (e.g., Akamai): incident response, rule tuning, bot management.
  
• Strong VPN gateway and secure remote access knowledge (Ivanti, Cisco AnyConnect, ZTNA concepts).
  
• Proficiency in web proxy platforms (Zscaler ZIA): SSL inspection, DLP, traffic steering.
  
• Deep experience in endpoint security (CrowdStrike, Trend Micro): threat hunting, incident response, containment.
  
• Experience with MFA technologies (Cisco Duo): integration, policy structure, logs, reporting.
  
• Secure file transfer solutions (MoveIT): encryption, DLP, auditing, partner onboarding.
  
• Certificate lifecycle management for security endpoints (TLS, ciphers, certificate pinning).
  
• SIEM integration for security telemetry across endpoints, firewalls, proxies, and identity systems.
  
• Strong understanding of vulnerability management, patching, OS lifecycle risk, and compliance frameworks.
  
• Excellent mentoring skills for L2 analysts in endpoint security, firewalls, VPN, and threat analysis.
  
• People management for the Network Security L2 analysts.
  

Why Join Us?

At Excis, your work has a direct impact. You’ll be part of a dynamic and hands-on team where your technical expertise drives user satisfaction and operational success.

We offer:

• A collaborative and supportive work environment
  
• Opportunities for continuous learning and career growth
  
• Exposure to diverse technologies and global clients
  

Requirements
Provide L3 operational support for network security and endpoint security incidents, service requests, and changes. Monitor security-focused tools: firewalls, VPN gateways, web proxies, endpoint protection platforms, DDoS/WAF services, MFA systems. Management of Akamai CDN. Execute security patching, device health checks, and configuration updates for security platforms. Assist in the deployment and onboarding of security appliances and endpoint agents, following security baselines and compliance standards. Perform triage and troubleshooting of security, authentication, access, malware, and threat‑related incidents. Support secure remote access operations, including VPN provisioning, ZTNA processes, MFA troubleshooting, and access reviews. Assist in implementing and monitoring DDoS protection, web filtering, endpoint security policies, SSL inspection, and threat protection rules. Follow procedures for secure file transfer, encryption, DLP controls, and audit‑compliant partner onboarding. Participate in security-oriented maintenance such as firmware/security updates, rulebase reviews, and threat‑driven tuning. Maintain documentation of security incidents, policy changes, security devices, and endpoint inventories. Contribute to improving security operational processes, including recurring issue analysis and automation opportunities. Collaborate closely with SOC, Cybersecurity, IAM, and other Infrastructure teams on cross-functional security issues. Ensure compliance with security policies, audit requirements, vulnerability remediation schedules, and secure configuration standards. Maintain up-to-date knowledge of security technologies, threat landscapes, and vendor best practices. Participate in knowledge sharing, operational readiness, and security service reviews. Support backup restoration tests and DR drills related to security platforms. Escalate unresolved or high-impact security incidents according to the escalation matrix. Lead the L2 Network Security analysts and organize an On-Call rota for this area. Required Skills & Qualifications: Advanced firewall expertise (Cisco, Palo Alto, Fortinet, Check Point, IBM Vyatta): policy design, HA, migrations, cleanup, and optimization. DDoS, WAF and CDN expertise (e.g., Akamai): incident response, rule tuning, bot management. Strong VPN gateway and secure remote access knowledge (Ivanti, Cisco AnyConnect, ZTNA concepts). Proficiency in web proxy platforms (Zscaler ZIA): SSL inspection, DLP, traffic steering. Deep experience in endpoint security (CrowdStrike, Trend Micro): threat hunting, incident response, containment. Experience with MFA technologies (Cisco Duo): integration, policy structure, logs, reporting. Secure file transfer solutions (MoveIT): encryption, DLP, auditing, partner onboarding. Certificate lifecycle management for security endpoints (TLS, ciphers, certificate pinning). SIEM integration for security telemetry across endpoints, firewalls, proxies, and identity systems. Strong understanding of vulnerability management, patching, OS lifecycle risk, and compliance frameworks. Excellent mentoring skills for L2 analysts in endpoint security, firewalls, VPN, and threat analysis. People management for the Network Security L2 analysts.