SIEM Platform Engineer (SIEM & SOAR)

JOB TITLE: SIEM Platform Engineer (SIEM & SOAR)
WORK SETUP: Hybrid in Cubao, Quezon City
WORK SHIFT: Shifting
Salary budget: Confidential (Will be discussed during the job offer)

What You’ll Do

SIEM Engineering
• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.
• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security data from networks, endpoints, cloud environments, and applications.
• Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation
• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.
• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.
• Streamline SOC processes through automation and tool integrations.

Security Operations Support
• Support incident response activities through actionable detections and automated workflows.
• Investigate recurring security issues and implement long-term engineering solutions.
• Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We’re Looking For
• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.
• Experience working in a SOC environment is preferred.
• Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).
• Experience developing SOAR playbooks and security automations.
• Scripting experience in Python, PowerShell, or Bash.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup
• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules