(ACTIVE) I SIEM Platform Engineer (SIEM & SOAR) I IN CUBAO I

Job Title

SIEM Platform Engineer (SIEM & SOAR)

Work Location

Cubao, Quezon City, Philippines

Work Setup

Hybrid

Work Shift

Shifting

Salary

Confidential – To be discussed during the job offer

Job Summary

We are looking for a SIEM Platform Engineer with strong hands-on experience in SIEM and SOAR engineering or administration. The role will focus on designing, implementing, optimizing, and maintaining security monitoring and automation platforms to improve threat visibility, detection accuracy, and incident response capabilities.

The ideal candidate will have experience with major SIEM platforms, SOAR playbooks, security automation, scripting, and SOC operations.

Roles & Responsibilities

SIEM Engineering

• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.

• Develop correlation rules, dashboards, alerts, and reports to improve threat detection and visibility.

• Integrate security data from networks, endpoints, cloud environments, and applications.

• Improve data parsing, quality, and normalization to enhance detection accuracy.

SOAR & Security Automation

• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.

• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.

• Automate SOC processes through tool integrations and security workflows.

Security Operations Support

• Support incident response activities through actionable detections and automated workflows.

• Investigate recurring security issues and implement long-term engineering solutions.

• Collaborate with compliance, audit, and IT teams to strengthen security controls and processes.

Professional & Technical Skills

• Minimum 3 years of experience in SIEM and/or SOAR engineering or administration.

• Hands-on experience with at least one major SIEM platform.

• Experience developing SOAR playbooks and security automations.

• Experience working in a SOC environment is preferred.

• Scripting knowledge in Python, PowerShell, or Bash.

• Knowledge of MITRE ATT&CK, NIST, or CIS Controls.

• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

• Strong troubleshooting, analytical, and problem-solving skills.

Candidate Eligibility

• Minimum 3 years of relevant SIEM/SOAR experience.

• Candidates must currently be based in the Philippines.

• Must have the legal right to live and work in the Philippines.

• Must be willing to work in a hybrid setup in Cubao, Quezon City.

• Must be amenable to shifting schedules.

Recruitment Process

1. Screening with CV Reviewer

2. Endorsement for validation and further CV screening through Workday, including HRI Toolkit, FCV, and CV

3. Client Review

Pre-Screening Questions

1. How many years of relevant hands-on experience do you have in SIEM and/or SOAR engineering or administration?

2. Do you have hands-on experience with at least one major SIEM platform such as Google SecOps, Splunk, Sentinel, QRadar, or ArcSight?

3. On a scale of 1–10, how would you rate your scripting experience in Python, PowerShell, or Bash?

4. What is your last drawn salary?

5. What is your expected salary?

6. Are you amenable to working in a hybrid setup with a shifting schedule in Cubao, Quezon City?