Security Engineer - SIEM / SOC CL8

Job Title: Security Engineer - SIEM / SOC CL8

Salary -70000-150000

Industry: Cybersecurity / IT Security

Location: Manila - Onsite

Work Setup: Onsite

Work Schedule: Shifting

Employment Type: Full-time

Role Overview:

We are looking for Security Engineers to design, implement, and manage security monitoring and automated response capabilities. You will partner with SOC teams, threat analysts, and IT stakeholders to strengthen detection coverage and accelerate incident response through automation.

Key Responsibilities:

SIEM Engineering and Management

- Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, Elastic

- Develop and maintain correlation rules, dashboards, and reports to identify threats and anomalies

- Integrate diverse data sources including network, endpoints, cloud, and applications into the SIEM platform

- Enhance data ingestion, parsing, and normalization to improve detection quality and reduce noise

SOAR and Automation

- Implement and manage SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient

- Develop automated playbooks for incident response, alert triage, and threat intelligence enrichment

- Collaborate with SOC analysts to streamline workflows and improve response efficiency

- Maintain integrations with ticketing systems, threat intel feeds, and security tools

Security Engineering and Operations Support

- Support incident response by delivering actionable alerts and automation-driven insights

- Conduct root cause analysis of recurring threats and implement engineering solutions

- Partner with audit and compliance teams to align security controls with regulatory standards

- Provide training and documentation for SOC and IT teams on SIEM/SOAR platforms

Qualifications:

Education and Experience

- Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field

- Minimum 5 years of cybersecurity experience with hands-on SIEM/SOAR engineering exposure

- Experience in a SOC environment is highly preferred

Core Technical Skills

- Proven experience with at least one SIEM platform: Splunk, Sentinel, QRadar, ArcSight, Google SecOps

- Hands-on experience developing SOAR playbooks and automation workflows

- Scripting skills in Python, PowerShell, or Bash for automation and integrations

- Knowledge of frameworks such as MITRE ATTCK, NIST, or CIS Controls

- Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security AWS, Azure, or GCP

Work Setup:

- Willing to work on a shifting schedule

- Willing to work onsite in Manila - Cyberpark, Cubao

Recruitment Process:

1. Endorse for Validation

2. Screening with CV Review and upload through Workday, along with HRI toolkit, FCV and CV

3. For review with the client

How to Apply:

Send your updated CV in PDF format.

Note: Salary is confidential. Final offer will depend on the client and project assignment.