SIEM Platform Engineer (SIEM & SOAR)

What You'll Do:

SIEM Engineering
• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.
• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security data from networks, endpoints, cloud environments, and applications.
• Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation
• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.
• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.
• Streamline SOC processes through automation and tool integrations.

Security Operations Support
• Support incident response activities through actionable detections and automated workflows.
• Investigate recurring security issues and implement long-term engineering solutions.
• Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We're Looking For
• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.
• Experience working in a SOC environment is preferred.
• Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).
• Experience developing SOAR playbooks and security automations.
• Scripting experience in Python, PowerShell, or Bash.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup
• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules

Additional Information:
• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role

Benefits & Perks
• Competitive salary package
• Performance bonus and 13th Month Pay
• Day 1 HMO and Life Insurance coverage
• Flexible working arrangements
• Company-sponsored training, upskilling, and certifications
• Expanded maternity and paternity benefits
• Employee Stock Purchase Plan
• Inclusive and collaborative work culture

RECRUITMENT PROCESS:

• Screening with CV Reviewer
• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV
• For review with the client


PRE-SCREENING QUESTIONS:

• How many years of relevant hands-on experience in SIEM and/or SOAR engineering or administration?
• Do you have hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc)?
• Rate yourself from 1 to 10, 10 being the highest, with your scripting experience in Python, PowerShell, or Bash.
• How much is your last drawn salary?
• How much is your salary expectation?
• Are you amenable to working on an onsite setup with a shifting schedule in Cubao?