Security Engineer (SIEM & SOAR) | Specialist / Team Lead

Work Setup: Hybrid – Cubao
Work Shift: Shifting
Salary: Confidential – to be discussed during the offer stage

Job Overview

We are looking for a Security Engineer (SIEM & SOAR) at Specialist/Team Lead level to lead the design, implementation, and optimization of SIEM and SOAR capabilities. The role will provide technical leadership, support security operations transformation initiatives, and mentor security engineers and analysts.

Key Responsibilities

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.

• Develop advanced detection use cases, correlation rules, dashboards, and reporting capabilities.

• Drive continuous improvements in log management, security visibility, and threat detection effectiveness.

• Provide technical leadership during SIEM deployments, integrations, and enhancements.

SOAR & Security Automation

• Develop and maintain automated incident response playbooks and orchestration workflows.

• Identify opportunities to automate security processes and improve SOC efficiency.

• Integrate SOAR platforms with threat intelligence, ticketing systems, and other security technologies.

• Collaborate with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations

• Serve as the technical lead for assigned cybersecurity projects and initiatives.

• Coach and mentor junior security engineers and analysts.

• Review engineering deliverables and ensure adherence to cybersecurity best practices.

• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

Requirements

• 3–5 years of relevant cybersecurity experience.

• Strong hands-on experience in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or cybersecurity engineering initiatives.

• SOC experience is highly preferred.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.

• Experience with cloud security technologies and modern security operations tools.

Technical Skills

Experience with one or more of the following SIEM platforms:

• Splunk

• Microsoft Sentinel

• Google SecOps

• IBM QRadar

• ArcSight

Additional technical requirements:

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Experience integrating SIEM/SOAR platforms with security and IT operations technologies.

• Knowledge of security monitoring, threat detection, incident response, and SOC operations.

Work Setup

• Hybrid work arrangement in Cubao.

• Willingness to work on a shifting schedule.

• Applicants must currently be in the Philippines and have the legal right to live and work in the country.

Recruitment Process

1. Initial screening with CV Reviewer.

2. Endorsement for validation and further CV screening through Workday, including the HRI Toolkit, FCV, and CV.

3. Client review.

Pre-Screening Questions

• How many years of relevant cybersecurity experience do you have?

• How many years of hands-on SIEM and/or SOAR engineering experience do you have?

• How many years of experience do you have leading small teams, workstreams, or cybersecurity engineering initiatives?

• What is your last drawn salary?

• What is your salary expectation?

• Are you willing to work in a hybrid setup in Cubao with a shifting schedule?

• What is your notice period?