SIEM Platform Engineer (SIEM & SOAR)

JOB TITLE: SIEM Platform Engineer (SIEM & SOAR)

WORK SETUP: Hybrid in Cubao, Quezon City

WORK SHIFT: Shifting

Salary budget: Confidential (Will be discussed during the job offer)

What You'll Do

SIEM Engineering

• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.

• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.

• Integrate security data from networks, endpoints, cloud environments, and applications.

• Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation

• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.

• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.

• Streamline SOC processes through automation and tool integrations.

Security Operations Support

• Support incident response activities through actionable detections and automated workflows.

• Investigate recurring security issues and implement long-term engineering solutions.

• Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We're Looking For

• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.

• Experience working in a SOC environment is preferred.

• Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).

• Experience developing SOAR playbooks and security automations.

• Scripting experience in Python, PowerShell, or Bash.

• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.

• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup

• Hybrid work arrangement

• Cubao office location

• Amenable to possible shifting schedules

Additional Information:

• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role

Benefits & Perks

• Competitive salary package

• Performance bonus and 13th Month Pay

• Day 1 HMO and Life Insurance coverage

• Flexible working arrangements*

• Company-sponsored training, upskilling, and certifications

• Expanded maternity and paternity benefits*

• Employee Stock Purchase Plan

• Inclusive and collaborative work culture

RECRUITMENT PROCESS:

• Screening with CV Reviewer

• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV

• For review with the client

PRE-SCREENING QUESTIONS:

• How many years of relevant hands-on experience in SIEM and/or SOAR engineering or administration?

• Do you have hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc)?

• Rate yourself from 1 to 10, 10 being the highest, with your scripting experience in Python, PowerShell, or Bash.

• How much is your last drawn salary?

• How much is your salary expectation?

• Are you amenable to working on an onsite setup with a shifting schedule in Cubao?