Security Engineer (SIEM & SOAR)

Our client is looking for a Specialist/Team Lead – Security Engineering to join its Cybersecurity team. In this role, you will lead the design, implementation, and optimization of SIEM and SOAR capabilities, while mentoring engineers and supporting security operations transformation initiatives.

What You'll Do

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.
• Lead the development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive continuous improvements in log management, visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.

SOAR & Security Automation

• Lead the development of automated incident response playbooks and orchestration workflows.
• Identify automation opportunities that improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.
• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review engineering deliverables and ensure adherence to cybersecurity best practices.
• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

What We're Looking For

Qualifications

• 3–5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Strong hands-on experience in one or more SIEM platforms:
• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, or Bash scripting.
• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.
• Experience with cloud security technologies and modern security operations tools.

Work Setup

• Hybrid work arrangement
• Cubao/Manila office location
• Amenable to possible shifting schedules