Security Engineering – SIEM & SOAR

Location: Cubao, Quezon City

Work Setup: Hybrid

Schedule: Amenable to shifting schedules

Employment Type: Full-time

Job Summary

We are looking for an experienced Security Engineer with strong hands-on expertise in SIEM and/or SOAR engineering to join cybersecurity team.

The role will focus on designing and implementing security monitoring solutions, developing advanced detection capabilities, automating incident response, and providing technical leadership across security engineering initiatives.

What You'll Do

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.
• Develop advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Continuously improve log management, security visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.

SOAR & Security Automation

• Develop automated incident response playbooks and orchestration workflows.
• Identify automation opportunities to improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and other security technologies.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review engineering deliverables and ensure adherence to cybersecurity best practices.
• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

What We're Looking For

Qualifications

• 3–5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Strong hands-on experience with one or more SIEM platforms:
• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, or Bash scripting.
• Strong understanding of:
• MITRE ATT&CK
• NIST
• CIS Controls
• Detection engineering concepts
• Experience with cloud security technologies and modern security operations tools.

If you're a cybersecurity professional with strong SIEM/SOAR engineering experience and are ready to take on technical leadership responsibilities, we'd love to hear from you!