Security Engineer – SIEM / SOC | Cybersecurity | Onsite | Manila, Philippines

Location: Manila, Philippines (Onsite)

Employment Type: Full-Time

Work Setup: Onsite

Work Schedule: Rotating/Shifting Schedule

Hiring: Immediate

Join Our Cybersecurity Team

We are seeking experienced Security Engineers specializing in SIEM and Security Operations Center (SOC) technologies to help strengthen enterprise security operations through advanced threat detection, security monitoring, and automation.

This role is ideal for cybersecurity professionals with strong experience in SIEM engineering, SOAR automation, incident response, and security operations who are passionate about protecting enterprise environments against evolving cyber threats.

Key Responsibilities

SIEM Engineering & Security Monitoring

• Design, implement, configure, and optimize SIEM platforms to improve threat detection and visibility.
  
• Develop and maintain correlation rules, dashboards, alerts, reports, and use cases.
  
• Integrate logs and telemetry from networks, endpoints, cloud platforms, applications, and security devices.
  
• Improve data ingestion, parsing, normalization, and enrichment to increase detection accuracy while reducing false positives.
  
• Monitor and continuously enhance SIEM performance and detection capabilities.
  

SOAR & Security Automation

• Design, implement, and maintain SOAR platforms and security automation workflows.
  
• Develop automated playbooks for:
  
  
  • Incident response
    
  • Alert triage
    
  • Threat intelligence enrichment
    
  • Security orchestration
  
  
• Integrate SIEM, ticketing systems, security tools, and threat intelligence feeds.
  
• Collaborate with SOC Analysts to improve operational efficiency and reduce response times.
  

Security Operations & Incident Response

• Support cyber incident investigations with actionable alerts and automated workflows.
  
• Perform root cause analysis of recurring security events and implement long-term engineering improvements.
  
• Work closely with security, infrastructure, cloud, and compliance teams.
  
• Assist in strengthening security controls aligned with industry best practices and regulatory requirements.
  
• Create technical documentation and provide knowledge sharing for SOC and IT teams.
  

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
  

Experience

• Minimum of 5 years of hands-on cybersecurity experience
  
• Strong experience working within a Security Operations Center (SOC) environment
  
• Proven experience designing, implementing, or managing SIEM solutions
  
• Experience developing security automation and SOAR playbooks
  

Technical Skills

Hands-on experience with one or more SIEM platforms:

• Splunk Enterprise Security
  
• Microsoft Sentinel
  
• IBM QRadar
  
• Google SecOps
  
• Elastic Security
  
• ArcSight
  

Experience with one or more SOAR platforms:

• Cortex XSOAR
  
• Splunk SOAR
  
• IBM Resilient
  

Strong scripting experience using:

• Python
  
• PowerShell
  
• Bash
  

Knowledge of cybersecurity frameworks including:

• MITRE ATT&CK
  
• NIST Cybersecurity Framework
  
• CIS Controls
  

Experience with enterprise security technologies such as:

• EDR/XDR
  
• Firewalls
  
• IDS/IPS
  
• Cloud Security (AWS, Microsoft Azure, or Google Cloud Platform)
  

Preferred Qualifications

The following are highly desirable but not mandatory:

• Experience supporting enterprise SOC operations
  
• Experience integrating cloud and hybrid security environments
  
• Security certifications such as:
  
  
  • CompTIA Security+
    
  • CySA+
    
  • GSEC
    
  • Splunk Certified Power User/Admin
    
  • Microsoft Security Certifications
    
  • GIAC Certifications
    
  • CISSP
  
  

Work Setup

• Onsite role based in Manila
  
• Willing to work on rotating and shifting schedules
  
• Able to support enterprise security operations in a fast-paced environment
  

Why Join Us?

• Work on enterprise cybersecurity projects
  
• Exposure to modern SIEM and SOAR technologies
  
• Opportunities to build expertise in cloud security and security automation
  
• Collaborative team environment
  
• Continuous learning and career growth opportunities
  

Recruitment Process

1. Initial Resume Screening
   
2. Technical Validation
   
3. Candidate Profile Submission
   
4. Client Review
   
5. Interview Process
   
6. Job Offer
   

Pre-Screening Questions

Please include the following information in your application:

1. How many years of hands-on cybersecurity experience do you have, particularly in SIEM and SOAR engineering?
   
2. Which SIEM platforms have you worked with? (Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Google SecOps, Elastic, etc.)
   
3. Have you designed, implemented, or optimized SIEM solutions? Please describe your experience.
   
4. Which SOAR platforms have you used? (Cortex XSOAR, Splunk SOAR, IBM Resilient, etc.)
   
5. What scripting languages are you proficient in? (Python, PowerShell, Bash, etc.)
   
6. Do you have experience working in a Security Operations Center (SOC)?
   
7. Are you familiar with cybersecurity frameworks such as MITRE ATT&CK, NIST, or CIS Controls?
   
8. Do you have experience with EDR/XDR, IDS/IPS, firewalls, or cloud security platforms (AWS, Azure, or GCP)?
   
9. Are you willing to work onsite in Manila on a rotating/shifting schedule?
   
10. Do you currently have an active or recent application with our client or an active Workday profile? If yes, please provide details to avoid duplicate submissions.
    

ATS & Google Jobs Keywords

Security Engineer • SIEM Engineer • SOC Engineer • Security Operations Center • Cybersecurity Engineer • Splunk • Microsoft Sentinel • IBM QRadar • Elastic Security • Google SecOps • ArcSight • SOAR • Cortex XSOAR • Splunk SOAR • IBM Resilient • Security Automation • Incident Response • Threat Detection • Threat Hunting • Security Monitoring • Log Management • MITRE ATT&CK • NIST Cybersecurity Framework • CIS Controls • EDR • XDR • IDS • IPS • Cloud Security • AWS Security • Azure Security • Google Cloud Security • Python • PowerShell • Bash • SOC Analyst • Blue Team • Enterprise Security • Cyber Defense • Security Operations • Immediate Hiring • Onsite Jobs • Manila Jobs