Security Engineer - SIEM / SOC (Cybersecurity)

Security Engineer – SIEM / SOC (Cybersecurity) | Splunk | Microsoft Sentinel | SOAR

Location

Cubao, Quezon City, Metro Manila, Philippines

Work Setup

• Onsite (Cyberpark, Cubao)

Work Schedule

• Shifting Schedule

Employment Type

Full-Time

Compensation

Competitive salary based on experience, technical expertise, and project assignment.

Start Date

ASAP

About the Role

We are seeking an experienced Security Engineer (SIEM/SOC) to join our Cybersecurity team. This role is ideal for professionals with hands-on expertise in SIEM Engineering, SOAR Automation, Security Monitoring, Threat Detection, and Incident Response .

You will design, implement, and optimize enterprise security monitoring solutions while collaborating with SOC Analysts, Threat Intelligence teams, and IT stakeholders to strengthen cybersecurity defenses through automation and advanced threat detection.

If you have experience with Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic, Cortex XSOAR, or Splunk SOAR , we'd like to hear from you.

Key Responsibilities

SIEM Engineering & Administration

• Design, implement, configure, and optimize enterprise SIEM platforms.

• Build and maintain correlation rules, detection logic, dashboards, and security reports.

• Integrate logs from cloud platforms, endpoints, networks, applications, and infrastructure.

• Improve log ingestion, parsing, normalization, and event correlation to enhance threat detection.

• Reduce false positives and improve monitoring efficiency.

SOAR & Security Automation

• Implement and administer SOAR platforms.

• Develop automated incident response playbooks and workflows.

• Automate alert triage, enrichment, containment, and remediation processes.

• Integrate SIEM with ticketing systems, threat intelligence platforms, and security tools.

• Improve SOC operational efficiency through automation.

Security Operations & Incident Response

• Support security monitoring and incident response activities.

• Investigate recurring security events and identify root causes.

• Implement engineering improvements to strengthen security posture.

• Collaborate with SOC Analysts, Threat Hunters, Infrastructure, and Cloud teams.

• Support compliance and audit requirements.

• Create technical documentation and provide knowledge transfer sessions.

Required Qualifications

Education

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.

Experience

• Minimum of 5 years of Cybersecurity experience.

• Strong hands-on experience in SIEM Engineering.

• Experience working in a Security Operations Center (SOC) environment.

• Experience implementing enterprise security monitoring solutions.

Technical Skills

Must Have

• SIEM Engineering

• Splunk

• Microsoft Sentinel

• QRadar

• ArcSight

• Google SecOps

• Elastic SIEM

• SOAR

• Cortex XSOAR

• Splunk SOAR

• IBM Resilient

• Python

• PowerShell

• Bash

• Security Automation

• Incident Response

• Threat Detection

• Security Monitoring

• Log Management

Preferred

• MITRE ATT&CK Framework

• NIST Cybersecurity Framework

• CIS Controls

• EDR/XDR Platforms

• IDS/IPS

• Firewall Technologies

• AWS Security

• Azure Security

• Google Cloud Platform (GCP)

• Threat Intelligence

• Cloud Security

• Security Analytics

Preferred Qualifications

• Experience designing enterprise SIEM architectures.

• Experience implementing SOAR automation at scale.

• Experience integrating cloud, endpoint, network, and application security logs.

• Security certifications such as:

  • Microsoft Security

  • Splunk Certified

  • CompTIA Security+

  • GIAC

  • CISSP (preferred)

What You'll Bring

• Strong analytical and problem-solving skills.

• Excellent communication and collaboration abilities.

• Ability to work in a fast-paced Security Operations environment.

• Passion for automation and continuous improvement.

• Customer-focused mindset with strong ownership and accountability.

Pre-Screening Questions

1. How many years of experience do you have in Cybersecurity, specifically in SIEM and SOAR Engineering?

2. Which SIEM platforms have you worked with? (Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic, etc.)

3. Describe your experience designing, implementing, or optimizing SIEM solutions.

4. Which SOAR platforms have you used? (Cortex XSOAR, Splunk SOAR, IBM Resilient, etc.)

5. Which scripting languages have you used for security automation? (Python, PowerShell, Bash)

6. Do you have experience with MITRE ATT&CK, NIST, or CIS Controls?

7. Are you willing to work onsite in Cubao, Quezon City on a shifting schedule?

8. What is your current notice period or earliest available start date?