Security Engineer – SIEM / SOC (CL8)

Security Engineer – SIEM / SOC (CL8)

Location: Manila – Cubao, Quezon City (Onsite)
Work Schedule: Shifting Schedule
Employment Type: Permanent
Start Date: ASAP

About the Role

We are seeking experienced Security Engineers – SIEM/SOC professionals to design, implement, and manage security monitoring, threat detection, and automated response capabilities. This role will work closely with Security Operations Center (SOC) teams, threat analysts, and IT stakeholders to improve security visibility, strengthen detection capabilities, and enhance incident response through automation.

The ideal candidate will have strong experience in SIEM and SOAR engineering, security operations, threat detection, and automation solutions within enterprise environments.

Key Responsibilities

SIEM Engineering & Management

• Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, and Elastic.

• Develop and maintain correlation rules, dashboards, alerts, and reports to identify security threats and anomalies.

• Integrate security data sources including networks, endpoints, cloud platforms, and applications into SIEM platforms.

• Improve data ingestion, parsing, normalization, and detection accuracy while reducing false positives.

• Monitor and enhance security event visibility across enterprise environments.

SOAR & Security Automation

• Implement and manage SOAR platforms such as Cortex XSOAR, Splunk SOAR, and IBM Resilient.

• Develop automated playbooks for incident response, alert investigation, and threat intelligence enrichment.

• Collaborate with SOC analysts to improve workflows and accelerate response activities.

• Maintain integrations with ticketing platforms, threat intelligence feeds, and security technologies.

• Identify opportunities to automate repetitive security operations tasks.

Security Engineering & Operations Support

• Support incident response activities by providing actionable alerts and automation-driven insights.

• Perform root cause analysis for recurring security incidents and recommend engineering improvements.

• Collaborate with audit and compliance teams to support security standards and regulatory requirements.

• Provide technical documentation and knowledge-sharing sessions for SOC and IT teams.

• Support continuous improvement of security monitoring and response capabilities.

Qualifications

Required

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Minimum of 5 years of cybersecurity experience.

• Hands-on experience with SIEM and SOAR engineering.

• Experience working in a Security Operations Center (SOC) environment is highly preferred.

• Strong analytical and problem-solving skills.

• Ability to troubleshoot complex security monitoring and incident response issues.

• Willingness to work on a shifting schedule.

• Open to onsite work arrangements.

Technical Skills

SIEM & Security Monitoring

• Splunk

• Microsoft Sentinel

• IBM QRadar

• ArcSight

• Google SecOps

• Elastic Security

SOAR & Automation

• Cortex XSOAR

• Splunk SOAR

• IBM Resilient

• Security automation workflows

• Incident response playbooks

Programming & Scripting

• Python

• PowerShell

• Bash scripting

Security Knowledge

• MITRE ATT&CK Framework

• NIST Framework

• CIS Controls

• EDR/XDR solutions

• Firewalls

• IDS/IPS

• Cloud security concepts (AWS, Azure, GCP)

What We're Looking For

• Strong hands-on experience in cybersecurity operations and engineering.

• Ability to design and improve security monitoring solutions.

• Experience working with SOC teams and security stakeholders.

• Passion for automation, threat detection, and continuous security improvement.

• Strong communication skills and ability to collaborate across technical teams.

Why Join Us?

• Work on enterprise-level cybersecurity initiatives.

• Gain exposure to modern SIEM and SOAR technologies.

• Collaborate with security professionals in a dynamic environment.

• Contribute to improving threat detection and incident response capabilities.

Recruitment Process

1. Endorsement for Validation

2. CV Screening and Profile Review

3. Workday Submission (HRI Toolkit, FCV, and CV)

4. Client Review and Interview Process

If you have strong experience in SIEM, SOC operations, and security automation, we would like to hear from you. Apply today and take the next step in your cybersecurity career.