Security Engineer – SIEM & SOAR

Gratitude Inc

10 Views

6 hours ago

Security Engineer – SIEM & SOAR

3-8 Year(s)

Manila

Quick Apply Apply

Job Description

Key Skills

Python Powershell Bash SIEM tools SOAR Automation Workflows Endpoint Detection and Response (EDR)

2 candidate(s) have already applied for this Job. Apply now

Security Engineer – SIEM & SOAR

Location: Manila, Philippines
Work Setup: Onsite
Work Shift: Shifting Schedule
Experience: 3–8 Years
Job Level: CL8
Job Type: Cybersecurity / Security Engineering

Role Overview

We are looking for experienced Security Engineers – SIEM & SOAR to design, implement, and manage security monitoring and automated response capabilities. The role involves working closely with SOC teams, threat analysts, and IT stakeholders to improve threat detection and accelerate incident response through automation.

Key Responsibilities

SIEM Engineering & Management

Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, or Elastic.
Develop and maintain correlation rules, dashboards, and reports.
Integrate network, endpoint, cloud, and application data sources into SIEM platforms.
Improve data ingestion, parsing, and normalization to enhance detection quality and reduce noise.

SOAR & Automation

Implement and manage SOAR platforms such as Cortex XSOAR, Splunk SOAR, or IBM Resilient.
Develop automated playbooks for incident response, alert triage, and threat intelligence enrichment.
Collaborate with SOC analysts to improve workflows and response efficiency.
Maintain integrations with ticketing systems, threat intelligence feeds, and security tools.

Security Engineering & Operations

Support incident response through actionable alerts and automation-driven insights.
Perform root cause analysis of recurring security threats.
Partner with audit and compliance teams to align security controls with regulatory requirements.
Provide training and technical documentation for SOC and IT teams.

Required Qualifications

Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.
3–8 years of cybersecurity experience with strong hands-on SIEM and/or SOAR engineering experience.
Experience working in a SOC environment is highly preferred.
Hands-on experience with at least one SIEM platform.
Experience developing SOAR playbooks and automation workflows.
Scripting knowledge in Python, PowerShell, or Bash.
Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security across AWS, Azure, or GCP.
Willingness to work onsite in Manila and on a shifting schedule.

Questionnaire – Mandatory

Questionnaire Link: https://myglit.com/lateral/cref/4e3f2e9a15

IMPORTANT: Filling out this questionnaire is MANDATORY to proceed with the recruitment process. Candidates who do not complete the form may not be considered for the next stage.

Recruitment Process

Endorsement for validation
CV screening and review
Workday profile submission with required screening documents
Client review and selection process

Important: Please provide the latest CV in PDF format along with complete screening notes based on the requirements above.

Role

Technical Services

Timings

Rotational Shifts (Permanent)

Industry

BPO

Work Mode

Work from office

Process

Voice

Functional Area

Science / Technology

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.