Job Title : Security Engineer (SIEM & SOAR) – Specialist / Team Lead

Job Description

We are hiring a Security Engineer (SIEM & SOAR) – Specialist / Team Lead for a hybrid opportunity in Cubao, Philippines. The role will provide technical leadership in designing, implementing, and optimizing SIEM and SOAR solutions, while mentoring security engineers and supporting cybersecurity operations transformation.

The ideal candidate will have 3–5 years of cybersecurity experience, strong hands-on SIEM/SOAR engineering expertise, and experience leading small teams, workstreams, or security engineering initiatives. Experience with Splunk, Microsoft Sentinel, Google SecOps, QRadar, ArcSight, security automation, scripting, threat detection, and incident response is highly preferred.

Location, Work Mode & Shift

• Location: Cubao, Quezon City, Philippines

• Work Setup: Hybrid

• Shift: Shifting Schedule

• Experience: 3–5 Years

• Employment Type: Full-Time

Key Responsibilities

• Design, implement, and optimize scalable SIEM architectures, detection use cases, correlation rules, dashboards, and reporting.

• Lead the development of SOAR playbooks and security automation workflows to improve SOC efficiency and incident response.

• Serve as a technical lead for cybersecurity projects and initiatives, ensuring quality and adherence to security best practices.

• Coach and mentor junior security engineers and analysts while reviewing technical deliverables.

• Collaborate with SOC, Threat Hunting, Incident Response, clients, and stakeholders to translate business requirements into technical security solutions.

Required Skills

1. SIEM & SOAR Engineering

2. Splunk / Microsoft Sentinel / QRadar

3. Security Automation & Scripting

4. Threat Detection & Incident Response

5. Cybersecurity Technical Leadership

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 3–5 years of relevant cybersecurity experience with strong hands-on SIEM and/or SOAR engineering expertise.

• Experience leading small teams, workstreams, or cybersecurity engineering initiatives.

• SOC experience is highly preferred.

• Hands-on experience with one or more SIEM platforms such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight.

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering.

• Experience with cloud security technologies and modern security operations tools.

Important Notes

• Hybrid work setup in Cubao.

• Candidates must be willing to work a shifting schedule.

• Applicants must currently be in the Philippines and have the right to live and work in the country.

• Former employees are not eligible.