Security Engineer – SIEM / SOC (Cybersecurity)

Gratitude Inc

10 Views

18 hours ago

Security Engineer – SIEM / SOC (Cybersecurity)

5-7 Year(s)

Manila (Cubao Quezon City)

Job Description

Key Skills

SIEM tools SOAR Cybersecurity Frameworks Working knowledge of Cybersecurity technologies, Networking, or system administration

0 candidate(s) have already applied for this Job. Apply now

Security Engineer – SIEM / SOC (Cybersecurity) | Splunk | Microsoft Sentinel | SOAR

Location

Cubao, Quezon City, Metro Manila, Philippines

Work Setup

Onsite (Cyberpark, Cubao)

Work Schedule

Shifting Schedule

Employment Type

Full-Time

Compensation

Competitive salary based on experience, technical expertise, and project assignment.

Start Date

ASAP

About the Role

We are seeking an experienced Security Engineer (SIEM/SOC) to join our Cybersecurity team. This role is ideal for professionals with hands-on expertise in SIEM Engineering, SOAR Automation, Security Monitoring, Threat Detection, and Incident Response.

You will design, implement, and optimize enterprise security monitoring solutions while collaborating with SOC Analysts, Threat Intelligence teams, and IT stakeholders to strengthen cybersecurity defenses through automation and advanced threat detection.

If you have experience with Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic, Cortex XSOAR, or Splunk SOAR, we'd like to hear from you.

Key Responsibilities

SIEM Engineering & Administration

Design, implement, configure, and optimize enterprise SIEM platforms.
Build and maintain correlation rules, detection logic, dashboards, and security reports.
Integrate logs from cloud platforms, endpoints, networks, applications, and infrastructure.
Improve log ingestion, parsing, normalization, and event correlation to enhance threat detection.
Reduce false positives and improve monitoring efficiency.

SOAR & Security Automation

Implement and administer SOAR platforms.
Develop automated incident response playbooks and workflows.
Automate alert triage, enrichment, containment, and remediation processes.
Integrate SIEM with ticketing systems, threat intelligence platforms, and security tools.
Improve SOC operational efficiency through automation.

Security Operations & Incident Response

Support security monitoring and incident response activities.
Investigate recurring security events and identify root causes.
Implement engineering improvements to strengthen security posture.
Collaborate with SOC Analysts, Threat Hunters, Infrastructure, and Cloud teams.
Support compliance and audit requirements.
Create technical documentation and provide knowledge transfer sessions.

Required Qualifications

Education

Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.

Experience

Minimum of 5 years of Cybersecurity experience.
Strong hands-on experience in SIEM Engineering.
Experience working in a Security Operations Center (SOC) environment.
Experience implementing enterprise security monitoring solutions.

Technical Skills

Must Have

SIEM Engineering
Splunk
Microsoft Sentinel
QRadar
ArcSight
Google SecOps
Elastic SIEM
SOAR
Cortex XSOAR
Splunk SOAR
IBM Resilient
Python
PowerShell
Bash
Security Automation
Incident Response
Threat Detection
Security Monitoring
Log Management

Preferred

MITRE ATT&CK Framework
NIST Cybersecurity Framework
CIS Controls
EDR/XDR Platforms
IDS/IPS
Firewall Technologies
AWS Security
Azure Security
Google Cloud Platform (GCP)
Threat Intelligence
Cloud Security
Security Analytics

Preferred Qualifications

Experience designing enterprise SIEM architectures.
Experience implementing SOAR automation at scale.
Experience integrating cloud, endpoint, network, and application security logs.
Security certifications such as:
- Microsoft Security
- Splunk Certified
- CompTIA Security+
- GIAC
- CISSP (preferred)

What You'll Bring

Strong analytical and problem-solving skills.
Excellent communication and collaboration abilities.
Ability to work in a fast-paced Security Operations environment.
Passion for automation and continuous improvement.
Customer-focused mindset with strong ownership and accountability.

Pre-Screening Questions

How many years of experience do you have in Cybersecurity, specifically in SIEM and SOAR Engineering?
Which SIEM platforms have you worked with? (Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic, etc.)
Describe your experience designing, implementing, or optimizing SIEM solutions.
Which SOAR platforms have you used? (Cortex XSOAR, Splunk SOAR, IBM Resilient, etc.)
Which scripting languages have you used for security automation? (Python, PowerShell, Bash)
Do you have experience with MITRE ATT&CK, NIST, or CIS Controls?
Are you willing to work onsite in Cubao, Quezon City on a shifting schedule?
What is your current notice period or earliest available start date?

Role

Security

Timings

Rotational Shifts (Permanent)

Industry

BPO

Work Mode

Hybrid

Process

Voice

Functional Area

IT Software/Hardware

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.