Security Engineer (Fractional) (Cybersecurity)

Location: Fully remote; Cebu City, Philippines, Europe, or Australia.

Company

hirify.global is a Swiss software development partner with a 300+ person operation in the Philippines.

What you will do

• Design a 12-month security roadmap and establish a risk register with remediation priorities based on business impact.
• Mentor the IT Manager and run security office hours for lead developers covering secure coding, OWASP, and DevSecOps.
• Ensure data handling meets GDPR, the Philippines Data Privacy Act, the Australian Privacy Act, and other applicable regulations.
• Standardize responses to client security questionnaires and support audits, vendor assessments, and the sales cycle.
• Draft and implement incident response, access control, and BCP/DR policies, and oversee EDR, SIEM, and vulnerability scanner implementation.
• Define security frameworks for hirify.global Ventures portfolio companies and advise startups and leadership on technical security, data privacy, and security-by-design practices.

Requirements

• Proven hands-on experience in security engineering, cloud security, application security, or DevSecOps, ideally in software, technology, or outsourcing environments.
• Strong technical foundation across the SDLC, CI/CD security, AWS or GCP, identity and access management, vulnerability management, and endpoint security.
• Ability to independently assess and verify security controls by reviewing AWS/GCP configurations, GitHub repositories, CI/CD pipelines, and security tools, and provide practical recommendations.
• Experience with client security assessments, security questionnaires, audits, or vendor assessments.
• Experience working with distributed teams across Europe, Asia, and Australia.

Nice to have

• Experience with governance, risk management, SOC 2, ISO 27001, GDPR, and other compliance frameworks.
• AWS/GCP, CISSP, CISM, CISA, or equivalent security certifications.
• Experience with early-stage startups.

Culture & Benefits

• Fully remote, part-time fractional engagement.
• Work across distributed teams in Europe, Asia, and Australia.
• Balance Swiss-quality security expectations with the agility of a software outsourcing firm.