Security Engineer (SIEM & SOAR) – Specialist / Team Lead

Job Location: Cubao, Philippines
Work Setup: Hybrid
Work Shift: Shifting
Experience: 3–5 Years
Salary: Confidential / Discussed during offer stage
Employment Type: Permanent

Job Summary

We are looking for a Security Engineer (SIEM & SOAR) – Specialist / Team Lead to lead SIEM and SOAR engineering, security automation, detection engineering, and cybersecurity operations initiatives. The role involves technical leadership, solution implementation, automation, and mentoring of security engineering teams.

Key Responsibilities

SIEM Engineering

• Design and implement scalable SIEM solutions across enterprise environments.

• Develop advanced detection use cases, correlation rules, dashboards, and reports.

• Improve log management, security visibility, and threat detection capabilities.

• Provide technical leadership for SIEM deployments and enhancements.

SOAR & Security Automation

• Develop automated incident response playbooks and orchestration workflows.

• Identify opportunities to automate SOC processes and improve response times.

• Integrate SOAR platforms with threat intelligence, ticketing, and security tools.

• Collaborate with SOC, Threat Hunting, and Incident Response teams.

Team Leadership

• Lead assigned cybersecurity projects and engineering initiatives.

• Mentor and guide junior security engineers and analysts.

• Review technical deliverables and ensure cybersecurity best practices.

• Work with stakeholders to translate business requirements into technical solutions.

Required Qualifications

• 3–5 years of relevant cybersecurity experience.

• Strong hands-on experience in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or engineering initiatives.

• SOC experience is highly preferred.

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.

• Must be currently based in the Philippines with valid authorization to work in the country.

• Must not have an active application with the organization or be a former employee.

Technical Skills

• SIEM: Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight.

• SOAR playbook development and security automation.

• Python, PowerShell, or Bash scripting.

• MITRE ATT&CK, NIST, CIS Controls, and detection engineering.

• Cloud security technologies and modern security operations tools.

Work Requirements

• Hybrid work arrangement in Cubao.

• Willingness to work on shifting schedules.

• Applicants must currently be in the Philippines and have the right to live and work in the country.

Recruitment Process

• CV screening

• Validation and further CV screening

• Client review

• Further selection stages as applicable

Pre-Screening Questions

1. How many years of relevant cybersecurity experience do you have?

2. How many years of hands-on SIEM and/or SOAR engineering experience do you have?

3. How many years of experience do you have leading teams, workstreams, or cybersecurity engineering initiatives?

4. What is your last drawn salary?

5. What is your expected salary?

6. Are you willing to work in a hybrid setup in Cubao with a shifting schedule?

7. What is your notice period?