Security Engineer – SIEM / SOC | Cybersecurity

Gratitude Inc

11 Views

10 hours ago

Security Engineer – SIEM / SOC | Cybersecurity

5-10 Year(s)

Manila (Diliman quezon city)

Job Description

Key Skills

SIEM tools SOAR Cybersecurity Frameworks Working knowledge of Cybersecurity technologies, Networking, or system administration

0 candidate(s) have already applied for this Job. Apply now

Security Engineer – SIEM / SOC | Cybersecurity | Onsite | Manila, Philippines

Location: Manila, Philippines (Onsite)

Employment Type: Full-Time

Work Setup: Onsite

Work Schedule: Rotating/Shifting Schedule

Hiring: Immediate

Join Our Cybersecurity Team

We are seeking experienced Security Engineers specializing in SIEM and Security Operations Center (SOC) technologies to help strengthen enterprise security operations through advanced threat detection, security monitoring, and automation.

This role is ideal for cybersecurity professionals with strong experience in SIEM engineering, SOAR automation, incident response, and security operations who are passionate about protecting enterprise environments against evolving cyber threats.

Key Responsibilities

SIEM Engineering & Security Monitoring

Design, implement, configure, and optimize SIEM platforms to improve threat detection and visibility.
Develop and maintain correlation rules, dashboards, alerts, reports, and use cases.
Integrate logs and telemetry from networks, endpoints, cloud platforms, applications, and security devices.
Improve data ingestion, parsing, normalization, and enrichment to increase detection accuracy while reducing false positives.
Monitor and continuously enhance SIEM performance and detection capabilities.

SOAR & Security Automation

Design, implement, and maintain SOAR platforms and security automation workflows.
Develop automated playbooks for:
- Incident response
- Alert triage
- Threat intelligence enrichment
- Security orchestration
Integrate SIEM, ticketing systems, security tools, and threat intelligence feeds.
Collaborate with SOC Analysts to improve operational efficiency and reduce response times.

Security Operations & Incident Response

Support cyber incident investigations with actionable alerts and automated workflows.
Perform root cause analysis of recurring security events and implement long-term engineering improvements.
Work closely with security, infrastructure, cloud, and compliance teams.
Assist in strengthening security controls aligned with industry best practices and regulatory requirements.
Create technical documentation and provide knowledge sharing for SOC and IT teams.

Required Qualifications

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Experience

Minimum of 5 years of hands-on cybersecurity experience
Strong experience working within a Security Operations Center (SOC) environment
Proven experience designing, implementing, or managing SIEM solutions
Experience developing security automation and SOAR playbooks

Technical Skills

Hands-on experience with one or more SIEM platforms:

Splunk Enterprise Security
Microsoft Sentinel
IBM QRadar
Google SecOps
Elastic Security
ArcSight

Experience with one or more SOAR platforms:

Cortex XSOAR
Splunk SOAR
IBM Resilient

Strong scripting experience using:

Python
PowerShell
Bash

Knowledge of cybersecurity frameworks including:

MITRE ATT&CK
NIST Cybersecurity Framework
CIS Controls

Experience with enterprise security technologies such as:

EDR/XDR
Firewalls
IDS/IPS
Cloud Security (AWS, Microsoft Azure, or Google Cloud Platform)

Preferred Qualifications

The following are highly desirable but not mandatory:

Experience supporting enterprise SOC operations
Experience integrating cloud and hybrid security environments
Security certifications such as:
- CompTIA Security+
- CySA+
- GSEC
- Splunk Certified Power User/Admin
- Microsoft Security Certifications
- GIAC Certifications
- CISSP

Work Setup

Onsite role based in Manila
Willing to work on rotating and shifting schedules
Able to support enterprise security operations in a fast-paced environment

Why Join Us?

Work on enterprise cybersecurity projects
Exposure to modern SIEM and SOAR technologies
Opportunities to build expertise in cloud security and security automation
Collaborative team environment
Continuous learning and career growth opportunities

Recruitment Process

Initial Resume Screening
Technical Validation
Candidate Profile Submission
Client Review
Interview Process
Job Offer

Pre-Screening Questions

Please include the following information in your application:

How many years of hands-on cybersecurity experience do you have, particularly in SIEM and SOAR engineering?
Which SIEM platforms have you worked with? (Splunk, Microsoft Sentinel, IBM QRadar, ArcSight, Google SecOps, Elastic, etc.)
Have you designed, implemented, or optimized SIEM solutions? Please describe your experience.
Which SOAR platforms have you used? (Cortex XSOAR, Splunk SOAR, IBM Resilient, etc.)
What scripting languages are you proficient in? (Python, PowerShell, Bash, etc.)
Do you have experience working in a Security Operations Center (SOC)?
Are you familiar with cybersecurity frameworks such as MITRE ATT&CK, NIST, or CIS Controls?
Do you have experience with EDR/XDR, IDS/IPS, firewalls, or cloud security platforms (AWS, Azure, or GCP)?
Are you willing to work onsite in Manila on a rotating/shifting schedule?
Do you currently have an active or recent application with our client or an active Workday profile? If yes, please provide details to avoid duplicate submissions.

ATS & Google Jobs Keywords

Security Engineer • SIEM Engineer • SOC Engineer • Security Operations Center • Cybersecurity Engineer • Splunk • Microsoft Sentinel • IBM QRadar • Elastic Security • Google SecOps • ArcSight • SOAR • Cortex XSOAR • Splunk SOAR • IBM Resilient • Security Automation • Incident Response • Threat Detection • Threat Hunting • Security Monitoring • Log Management • MITRE ATT&CK • NIST Cybersecurity Framework • CIS Controls • EDR • XDR • IDS • IPS • Cloud Security • AWS Security • Azure Security • Google Cloud Security • Python • PowerShell • Bash • SOC Analyst • Blue Team • Enterprise Security • Cyber Defense • Security Operations • Immediate Hiring • Onsite Jobs • Manila Jobs

Role

Account Manager

Timings

Rotational Shifts (Permanent)

Industry

BPO

Work Mode

Hybrid

Process

Non-Voice

Functional Area

ITES / BPO / Customer Service

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.