JOB TITLE: SIEM Platform Engineer (SIEM & SOAR)

WORK SETUP: Hybrid in Cubao, Quezon City

WORK SHIFT: Shifting

Salary budget: Confidential (Will be discussed during the job offer)


What You'll Do

SIEM Engineering

Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.

Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.

Integrate security data from networks, endpoints, cloud environments, and applications.

Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation

Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.

Develop playbooks for alert triage, incident response, and threat intelligence enrichment.

Streamline SOC processes through automation and tool integrations.

Security Operations Support

Support incident response activities through actionable detections and automated workflows.

Investigate recurring security issues and implement long-term engineering solutions.

Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We're Looking For

Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.

Experience working in a SOC environment is preferred.

Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).

Experience developing SOAR playbooks and security automations.

Scripting experience in Python, PowerShell, or Bash.

Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.

Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup

Hybrid work arrangement

Cubao office location

Amenable to possible shifting schedules

Additional Information:

Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role


Benefits & Perks

Competitive salary package

Performance bonus and 13th Month Pay

Day 1 HMO and Life Insurance coverage

Flexible working arrangements*

Company-sponsored training, upskilling, and certifications

Expanded maternity and paternity benefits*

Employee Stock Purchase Plan

Inclusive and collaborative work culture


RECRUITMENT PROCESS:


• Screening with CV Reviewer

• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV

• For review with the client


**REMINDER: Please do not include the name of the client and estimated salary in all your job postings. Kindly ensure that you upload the latest CVs of your candidates in PDF format with screening notes based on the JD provided.**


PRE-SCREENING QUESTIONS:


How many years of relevant hands-on experience in SIEM and/or SOAR engineering or administration?

Do you have hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc)?

Rate yourself from 1 to 10, 10 being the highest, with your scripting experience in Python, PowerShell, or Bash.

How much is your last drawn salary?

How much is your salary expectation?

Are you amenable to working on an onsite setup with a shifting schedule in Cubao?