Security Engineer (SIEM & SOAR)

We’re looking for a Security Engineer specializing in SIEM, SOAR, and security automation to strengthen threat detection and accelerate incident response. You’ll work closely with SOC teams, threat analysts, and IT stakeholders to build, optimize, and automate security monitoring and response capabilities.

 What We’re Looking For

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related field
• 3–8 years of cybersecurity experience, with hands-on SIEM/SOAR engineering
• Experience working in a SOC environment is highly preferred
• Hands-on experience with at least one SIEM platform, such as:
  • Splunk
  • Microsoft Sentinel
  • IBM QRadar
  • Google SecOps
  • ArcSight / Elastic
• Experience developing SOAR playbooks and automated response workflows
• Scripting experience with Python, PowerShell, or Bash
• Knowledge of MITRE ATT&CK, NIST, or CIS Controls
• Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security
• Exposure to AWS, Azure, or GCP is an advantage
• Willing to work on a shifting schedule

 What You’ll Do

• Design, implement, and optimize SIEM solutions and detection rules
• Build dashboards, correlation rules, and reports for threat detection
• Integrate network, endpoint, cloud, and application logs into SIEM platforms
• Develop and maintain SOAR playbooks for alert triage and incident response
• Automate threat intelligence enrichment and security workflows
• Improve data ingestion, parsing, normalization, and detection quality
• Support incident response through actionable alerts and automation
• Perform root cause analysis and engineer solutions to recurring threats
• Collaborate with SOC, IT, audit, and compliance teams
• Create documentation and provide technical training when needed
• 
  
• PRE-SCREENING QUESTIONS:
1. How many years of hands-on experience do you have in cybersecurity, specifically with SIEM and SOAR engineering?
2. Which SIEM platforms have you worked with (e.g., Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic)?
3. Have you designed, implemented, or optimized SIEM solutions? Please describe your experience.
4. Which SOAR platforms have you worked with (e.g., Cortex XSOAR, Splunk SOAR, IBM Resilient)?
5. How much is your last drawn salary?
6. What is your salary expectation?
7. Are you willing to work onsite in Manila on a shifting schedule?
• 
  
•