JOB TITLE: Security Engineer (SIEM & SOAR) | Specialist / Team Lead

WORK SETUP: Hybrid in Cubao

WORK SHIFT: Shifting

Salary budget: Confidential (will be discussed during the offer stage)


Lead Security Engineering and Automate Cyber Defense

Join our Cybersecurity team as a Specialist/Team Lead, where you will lead the design, implementation, and optimization of SIEM and SOAR capabilities while mentoring engineers and supporting security operations transformation initiatives.



What You'll Do


SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.

• Lead development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.

• Drive continuous improvements in log management, visibility, and threat detection effectiveness.

• Provide technical leadership during SIEM deployments and enhancements.


SOAR & Security Automation

• Lead development of automated incident response playbooks and orchestration workflows.

• Identify automation opportunities that improve SOC efficiency and reduce response times.

• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.

• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.


Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.

• Coach and mentor junior security engineers and analysts.

• Review engineering deliverables and ensure adherence to cybersecurity best practices.

• Collaborate with clients and stakeholders to translate business requirements into technical solutions.


What We're Looking For

• Qualifications

• 3-5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or engineering initiatives.

• SOC experience is highly preferred.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.


Technical Skills

• Strong hands-on experience in one or more SIEM platforms:

• Splunk

• Microsoft Sentinel

• Google SecOps

• QRadar

• ArcSight

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.

• Experience with cloud security technologies and modern security operations tools.


Work Setup

• Hybrid work arrangement

• Cubao office location

• Amenable to possible shifting schedules


Additional details:

• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role