Security Engineer (SIEM & SOAR) - Specialist / Team Lead

Job Overview

We are seeking a Security Engineer specializing in SIEM and SOAR to lead the design, implementation, and optimization of security monitoring and automation capabilities. The role will provide technical leadership, support security operations transformation, develop advanced detection capabilities, and mentor security engineers and analysts.

The successful candidate will work closely with SOC, Threat Hunting, Incident Response teams, clients, and other stakeholders to improve cyber defense capabilities and operational efficiency.

Key Responsibilities

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.

• Develop advanced detection use cases, correlation rules, dashboards, and security reporting.

• Improve log management, security visibility, and threat detection effectiveness.

• Provide technical leadership during SIEM deployments, integrations, and enhancements.

• Analyze security events and improve detection and monitoring capabilities.

SOAR & Security Automation

• Design and develop automated incident response playbooks and orchestration workflows.

• Identify automation opportunities to improve SOC efficiency and reduce response times.

• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.

• Collaborate with SOC, Threat Hunting, and Incident Response teams to improve security operations.

Team Leadership & Operations

• Serve as technical lead for assigned cybersecurity projects and initiatives.

• Coach and mentor junior security engineers and analysts.

• Review engineering deliverables and ensure adherence to cybersecurity best practices.

• Collaborate with clients and stakeholders to understand requirements and translate them into technical solutions.

• Support security engineering improvements, operational transformation, and process optimization.

Required Experience

• 3–5 years of relevant cybersecurity experience.

• Strong hands-on experience in SIEM and/or SOAR engineering.

• Experience leading small teams, workstreams, or cybersecurity engineering initiatives.

• SOC experience is highly preferred.

• Experience working with enterprise security operations and modern cybersecurity technologies.

Technical Skills

• Hands-on experience with one or more SIEM platforms:

  • Splunk

  • Microsoft Sentinel

  • Google SecOps

  • IBM QRadar

  • ArcSight

• Experience designing and implementing SOAR playbooks and automation workflows.

• Proficiency in Python, PowerShell, or Bash scripting.

• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.

• Experience with cloud security technologies and modern security operations tools.

• Knowledge of security monitoring, threat detection, incident response, and security automation.

Soft Skills

• Strong technical leadership and mentoring capabilities.

• Excellent analytical and problem-solving skills.

• Strong communication and stakeholder-management abilities.

• Ability to lead technical initiatives and work effectively across multiple teams.

• Strong documentation and presentation skills.

• Ability to work in a fast-paced security operations environment.

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Work Requirements

• Work setup: Hybrid.

• Location: Cubao, Philippines.

• Must be amenable to possible shifting schedules.

• Applicants must currently be in the Philippines and already have the legal right to live and work in the Philippines.

Recruitment Process

1. Screening with CV Reviewer.

2. Endorsement for validation and further CV screening through Workday, including the HRI toolkit, FCV, and CV.

3. Further review with the hiring team.

Candidates should submit their latest CV in PDF format with relevant screening notes based on the job requirements.