Job Title : Security Engineer – SIEM & SOAR

Job Description

We are hiring experienced Security Engineers – SIEM & SOAR to join a growing Cybersecurity team in Manila, Philippines. This role is ideal for cybersecurity professionals with hands-on experience in SIEM engineering, SOAR automation, SOC operations, threat detection, incident response, and security monitoring.

As a Security Engineer, you will design, implement, and optimize SIEM and SOAR solutions to improve security visibility, automate incident response, and strengthen cyber defense capabilities. You will collaborate with Security Operations Center (SOC) teams, threat analysts, IT infrastructure teams, and security stakeholders to build scalable security monitoring solutions and automate security operations.

Location, Work Mode & Shift

• Location: Manila, Philippines

• Work Setup: Onsite

• Shift: Rotating / Shifting Schedule

• Employment Type: Full-Time

• Experience: 3–8 Years

Key Responsibilities

• Design, implement, configure, and optimize SIEM platforms for enterprise security monitoring.

• Develop and maintain correlation rules, dashboards, alerts, reports, and detection use cases.

• Integrate logs from endpoints, networks, cloud platforms, applications, and security devices into SIEM solutions.

• Improve data ingestion, parsing, normalization, and log management to enhance threat detection accuracy.

• Design, develop, and maintain SOAR playbooks to automate incident response and security operations.

• Build automation workflows for alert triage, threat intelligence enrichment, and response orchestration.

• Collaborate with SOC analysts to improve detection coverage and response efficiency.

• Integrate SOAR platforms with ticketing systems, threat intelligence platforms, and security technologies.

• Support security investigations, incident response activities, and root cause analysis.

• Implement engineering improvements to reduce recurring security incidents.

• Work with audit, compliance, and governance teams to align security controls with industry standards.

• Prepare technical documentation, runbooks, and knowledge-sharing sessions for SOC and IT teams.

• Continuously improve security monitoring, automation, and operational efficiency.

Required Skills

• SIEM Engineering

• SOAR Engineering

• Splunk

• Microsoft Sentinel

• Google SecOps

• IBM QRadar

• Elastic SIEM

• Cortex XSOAR

• Splunk SOAR

• IBM Resilient

• Security Operations Center (SOC)

• Security Monitoring

• Threat Detection

• Incident Response

• Threat Intelligence

• Log Management

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• 3–8 years of experience in Cybersecurity with strong hands-on SIEM and/or SOAR engineering experience.

• Experience working in a Security Operations Center (SOC) environment is highly preferred.

• Hands-on experience with at least one SIEM platform such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, or Elastic.

• Experience developing SOAR playbooks and security automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Strong understanding of MITRE ATT&CK, NIST Cybersecurity Framework, and CIS Controls.

• Experience with EDR/XDR solutions, IDS/IPS, firewall technologies, and cloud security platforms.

• Strong analytical, troubleshooting, communication, and problem-solving skills.

• Willing to work onsite in Manila on a shifting schedule.

Important Notes

• Onsite role based in Manila.

• Candidates must be willing to work rotating or shifting schedules.

• Strong hands-on SIEM and/or SOAR engineering experience is required.

• Experience in a SOC environment is highly preferred.

• Experience with security automation, scripting, and cloud security is an advantage.