Security Engineer (SIEM & SOAR) | Specialist / Team Lead

Lead Security Engineering and Automate Cyber Defense
Join the Companies  Cybersecurity team as a Specialist/Team Lead, where you will lead the design, implementation, and optimization of SIEM and SOAR capabilities while mentoring engineers and supporting security operations transformation initiatives.

What You'll Do
SIEM Engineering
• Design and implement scalable SIEM architectures across enterprise environments.
• Lead development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive continuous improvements in log management, visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.

SOAR & Security Automation
• Lead development of automated incident response playbooks and orchestration workflows.
• Identify automation opportunities that improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.
• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations
• Serve as the technical lead for assigned projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review engineering deliverables and ensure adherence to cybersecurity best practices.
• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

What We're Looking For
• Qualifications
• 3-5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills
• Strong hands-on experience in one or more SIEM platforms:
• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, or Bash scripting.
• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.
• Experience with cloud security technologies and modern security operations tools.

Work Setup
• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules

Additional details:
• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role

NOTE: ANSWER THE FOLLOWING PRE-SCREENING QUESTION AND LEAVE YOUR ANSWER AS COMMENTS
PRE-SCREENING QUESTIONS:
• How many years of relevant cybersecurity experience do you have?
• How many years of hands-on SIEM and/or SOAR engineering experience do you have?
• How many years of experience do you have leading small teams, workstreams, or cybersecurity engineering initiatives?
• What is your last drawn salary?
• • How much is your salary expectation?
Are you willing to work in a hybrid setup in Cubao with a shifting schedule?
• Notice period