Security Engineer (SIEM & SOAR) | Specialist / Team Lead

JOB TITLE: Security Engineer (SIEM & SOAR) | Specialist / Team Lead

WORK SETUP: Hybrid in Cubao

WORK SHIFT: Shifting

Salary budget: Confidential (will be discussed during the offer stage)


What You'll Do
SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.

• Lead development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.

• Drive continuous improvements in log management, visibility, and threat detection effectiveness.

• Provide technical leadership during SIEM deployments and enhancements.


SOAR & Security Automation

• Lead development of automated incident response playbooks and orchestration workflows.

• Identify automation opportunities that improve SOC efficiency and reduce response times.

• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.

• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.


Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.

• Coach and mentor junior security engineers and analysts.

• Review engineering deliverables and ensure adherence to cybersecurity best practices.

• Collaborate with clients and stakeholders to translate business requirements into technical solutions.


What We're Looking For

• Qualifications

• 3-5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or engineering initiatives.

• SOC experience is highly preferred.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.


Technical Skills

• Strong hands-on experience in one or more SIEM platforms:

• Splunk

• Microsoft Sentinel

• Google SecOps

• QRadar

• ArcSight

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.

• Experience with cloud security technologies and modern security operations tools.


Work Setup

• Hybrid work arrangement

• Cubao office location

• Amenable to possible shifting schedules


Additional details:

• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role

RECRUITMENT PROCESS:
• Screening with CV Reviewer

• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV

• For review with the client

PRE-SCREENING QUESTIONS:
• How many years of relevant cybersecurity experience do you have?

• How many years of hands-on SIEM and/or SOAR engineering experience do you have?

• How many years of experience do you have leading small teams, workstreams, or cybersecurity engineering initiatives?

• What is your last drawn salary?

• • How much is your salary expectation?

Are you willing to work in a hybrid setup in Cubao with a shifting schedule?

• Notice period