Security Engineer – SIEM & SOAR

Location: Manila.

Work Setup: Onsite

Schedule: Shifting

About the Role

We are looking for an experienced Security Engineer with strong SIEM and SOAR experience to help monitor security threats, improve threat detection, and automate incident response processes.

Key Responsibilities

Design, implement, and manage SIEM solutions such as Splunk, Microsoft Sentinel, QRadar, Elastic, or Google SecOps.
Develop security alerts, correlation rules, dashboards, and reports.
Integrate network, endpoint, cloud, and application data into SIEM platforms.
Develop and maintain SOAR automation and incident-response playbooks.
Automate alert investigation, threat intelligence enrichment, and incident response.
Support SOC teams with security monitoring and incident response.
Investigate recurring security threats and perform root-cause analysis.
Maintain integrations with security and ticketing tools.
Create documentation and provide technical guidance to SOC and IT teams.

Requirements

Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field.
3–8 years of cybersecurity experience, particularly in SIEM/SOAR engineering.
Experience working in a SOC environment is an advantage.
Hands-on experience with at least one SIEM platform.

Experience with SOAR platforms such as Cortex XSOAR, Splunk SOAR, or IBM Resilient.

Scripting knowledge in Python, PowerShell, or Bash.
Knowledge of MITRE ATT&CK, NIST, or CIS Controls.
Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security.
Willingness to work onsite in Manila on a shifting schedule.

Pre-Screening Questions

How many years of hands-on cybersecurity experience do you have, specifically with SIEM and SOAR?

Which SIEM platforms have you worked with?

Have you designed, implemented, or optimized a SIEM solution? Please briefly describe your experience.

Which SOAR platforms have you worked with?

What is your current/last drawn salary?

What is your salary expectation?

Are you willing to work onsite in Manila on a shifting schedule?

Do you currently have an active or recent application with Accenture?