Security Engineer – SIEM & SOAR

Security Engineer – SIEM & SOAR

Location: Manila, Philippines
Work Setup: Onsite
Work Shift: Shifting Schedule
Experience: 3–8 Years
Job Level: CL8
Job Type: Cybersecurity / Security Engineering

Role Overview

We are looking for experienced Security Engineers – SIEM & SOAR to design, implement, and manage security monitoring and automated response capabilities. The role involves working closely with SOC teams, threat analysts, and IT stakeholders to improve threat detection and accelerate incident response through automation.

Key Responsibilities

SIEM Engineering & Management

• Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, or Elastic.

• Develop and maintain correlation rules, dashboards, and reports.

• Integrate network, endpoint, cloud, and application data sources into SIEM platforms.

• Improve data ingestion, parsing, and normalization to enhance detection quality and reduce noise.

SOAR & Automation

• Implement and manage SOAR platforms such as Cortex XSOAR, Splunk SOAR, or IBM Resilient.

• Develop automated playbooks for incident response, alert triage, and threat intelligence enrichment.

• Collaborate with SOC analysts to improve workflows and response efficiency.

• Maintain integrations with ticketing systems, threat intelligence feeds, and security tools.

Security Engineering & Operations

• Support incident response through actionable alerts and automation-driven insights.

• Perform root cause analysis of recurring security threats.

• Partner with audit and compliance teams to align security controls with regulatory requirements.

• Provide training and technical documentation for SOC and IT teams.

Required Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field.

• 3–8 years of cybersecurity experience with strong hands-on SIEM and/or SOAR engineering experience.

• Experience working in a SOC environment is highly preferred.

• Hands-on experience with at least one SIEM platform.

• Experience developing SOAR playbooks and automation workflows.

• Scripting knowledge in Python, PowerShell, or Bash.

• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.

• Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security across AWS, Azure, or GCP.

• Willingness to work onsite in Manila and on a shifting schedule.

Questionnaire – Mandatory

Questionnaire Link: https://myglit.com/lateral/cref/4e3f2e9a15

IMPORTANT: Filling out this questionnaire is MANDATORY to proceed with the recruitment process. Candidates who do not complete the form may not be considered for the next stage.

Recruitment Process

• Endorsement for validation

• CV screening and review

• Workday profile submission with required screening documents

• Client review and selection process

Important: Please provide the latest CV in PDF format along with complete screening notes based on the requirements above.