Location: Cubao, Quezon City
Work Shift: Shifting
Salary: Confidential, to be discussed during the job offer

Job Summary

We are looking for a SIEM Platform Engineer with strong experience in SIEM, SOAR, security automation, and Security Operations Center (SOC) environments. The role focuses on designing, optimizing, and maintaining security monitoring platforms, developing detection rules and automated response workflows, and improving overall security operations.

Key Responsibilities

SIEM Engineering

• Design, implement, configure, and optimize SIEM platforms such as Google SecOps, Splunk, Microsoft Sentinel, QRadar, and Elastic.

• Develop and maintain correlation rules, alerts, dashboards, and security reports.

• Integrate security data from networks, endpoints, cloud environments, and applications.

• Improve log parsing, data quality, and normalization to enhance threat detection and visibility.

SOAR & Security Automation

• Develop and maintain automated security response workflows using platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.

• Create SOAR playbooks for alert triage, incident response, and threat intelligence enrichment.

• Automate SOC processes through security tool integrations and workflow optimization.

Security Operations Support

• Support incident response through actionable security detections and automated workflows.

• Investigate recurring security issues and develop long-term engineering solutions.

• Collaborate with IT, Compliance, and Audit teams to strengthen security controls and processes.

Qualifications

• Minimum 3 years of hands-on experience in SIEM and/or SOAR engineering or administration.

• Experience working in a Security Operations Center (SOC) environment is preferred.

• Hands-on experience with at least one major SIEM platform such as Google SecOps, Splunk, Microsoft Sentinel, QRadar, ArcSight, or Elastic.

• Experience developing SOAR playbooks, security automations, and incident response workflows.

• Scripting experience in Python, PowerShell, or Bash.

• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.

• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

• Strong analytical, troubleshooting, and problem-solving skills.

• Must be currently based in the Philippines and have the legal right to live and work in the country.

• Willing to work on a hybrid setup and shifting schedule in Cubao, Quezon City.

Benefits & Perks

• Competitive salary package

• Performance bonus

• 13th Month Pay

• Day 1 HMO

• Life Insurance

• Flexible working arrangements*

• Company-sponsored training, upskilling, and certifications

• Expanded maternity and paternity benefits*

• Employee Stock Purchase Plan

• Inclusive and collaborative work environment

Interested in this opportunity? Send us your updated resume and take the next step in your career.