SECURITY ENGINEER (SIEM & SOAR) | SPECIALIST / TEAM LEAD

Job Title: SECURITY ENGINEER (SIEM & SOAR) | SPECIALIST / TEAM LEAD

Work Setup: Hybrid – Cubao
Work Shift: Shifting
Salary: Confidential 

We are looking for an experienced Security Engineer to lead the design, implementation, and optimization of SIEM and SOAR capabilities. This role is ideal for a cybersecurity professional with strong hands-on engineering expertise and experience leading teams or technical initiatives.

KEY RESPONSIBILITIES

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.

• Develop advanced detection use cases, correlation rules, dashboards, and reporting capabilities.

• Drive improvements in log management, security visibility, and threat detection effectiveness.

• Provide technical leadership during SIEM deployments, integrations, and enhancements.

SOAR AND SECURITY AUTOMATION

• Design and develop automated incident response playbooks and orchestration workflows.

• Identify automation opportunities to improve SOC efficiency and reduce response times.

• Integrate SOAR platforms with threat intelligence, ticketing systems, and other security technologies.

• Collaborate with SOC, Threat Hunting, and Incident Response teams to improve security operations.

TEAM LEADERSHIP AND OPERATIONS

• Serve as the technical lead for assigned projects and initiatives.

• Coach and mentor junior security engineers and analysts.

• Review engineering deliverables and ensure adherence to cybersecurity best practices.

• Collaborate with stakeholders to translate business requirements into effective technical solutions.

QUALIFICATIONS

• 3–5 years of relevant cybersecurity experience with strong hands-on expertise in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or engineering initiatives.

• SOC experience is highly preferred.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

TECHNICAL SKILLS

• Strong hands-on experience with one or more SIEM platforms, such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight.

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.

• Experience with cloud security technologies and modern security operations tools.