SIEM Platform Engineer (SIEM & SOAR)
Summary
Gratitude Inc is hiring a SIEM Platform Engineer to design, build, and optimize SIEM platforms (Splunk, Google SecOps, Sentinel, QRadar, Elastic) and SOAR playbooks/automations that improve threat detection and incident response. Hybrid role from a Cubao, Manila office with shifting schedules; needs 3+ years SIEM/SOAR experience and scripting in Python, PowerShell, or Bash.
What You'll Do:
SIEM Engineering
• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.
• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security data from networks, endpoints, cloud environments, and applications.
• Improve data quality, parsing, and normalization to enhance detection accuracy.
SOAR & Security Automation
• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.
• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.
• Streamline SOC processes through automation and tool integrations.
Security Operations Support
• Support incident response activities through actionable detections and automated workflows.
• Investigate recurring security issues and implement long-term engineering solutions.
• Partner with compliance, audit, and IT teams to strengthen security controls and processes.
What We're Looking For
• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.
• Experience working in a SOC environment is preferred.
• Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).
• Experience developing SOAR playbooks and security automations.
• Scripting experience in Python, PowerShell, or Bash.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.
Work Setup
• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules
Additional Information:
• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role
Benefits & Perks
• Competitive salary package
• Performance bonus and 13th Month Pay
• Day 1 HMO and Life Insurance coverage
• Flexible working arrangements
• Company-sponsored training, upskilling, and certifications
• Expanded maternity and paternity benefits
• Employee Stock Purchase Plan
• Inclusive and collaborative work culture
RECRUITMENT PROCESS:
• Screening with CV Reviewer
• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, FCV, and CV
• For review with the client
PRE-SCREENING QUESTIONS:
• How many years of relevant hands-on experience in SIEM and/or SOAR engineering or administration?
• Do you have hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc)?
• Rate yourself from 1 to 10, 10 being the highest, with your scripting experience in Python, PowerShell, or Bash.
• How much is your last drawn salary?
• How much is your salary expectation?
• Are you amenable to working on an onsite setup with a shifting schedule in Cubao?