Cyber Security Engineer

Our Clients; Mandaluyong; On-site; PHP 800,000 - 1,800,000; Full time

Job summary

Our Clients is seeking an experienced Cyber Security Engineer with SIEM and SOAR expertise to design, implement, and maintain enterprise security monitoring and automated incident response solutions. You will collaborate with security operations, threat analysts, and IT teams to enhance threat detection and automate response workflows.

The role requires hands-on skills with SIEM and SOAR, scripting, and knowledge of MITRE ATT&CK, NIST, CIS Controls, and cloud security.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
• At least 5 years of experience in SIEM and/or SOAR administration, engineering, or security operations.
• Experience working in a Security Operations Center (SOC) environment is an advantage.

Responsibilities

• Design, implement, configure, and optimize SIEM platforms.
• Develop and maintain correlation rules, dashboards, alerts, and reports for security monitoring.
• Integrate logs and telemetry from networks, endpoints, cloud platforms, and applications.
• Optimize data ingestion, parsing, and normalization to improve detection accuracy and platform performance.
• Monitor and continuously enhance SIEM effectiveness through tuning and rule optimization.

Skills

Analytical thinking

Problem-solving

Written and verbal communication

Independent work with cross-functional

Documentation and process improvement

Education

Bachelor's degree in Cybersecurity/CS/IT/IS

Tools

Python

PowerShell

Bash

SIEM platforms

SOAR solutions

Threat intelligence platforms

Cloud security services

AWS

Azure

GCP

Job description

Job Overview

We are seeking an experienced Cyber Security Engineer with expertise in Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms. This role is responsible for designing, implementing, and maintaining enterprise security monitoring and automated incident response solutions to strengthen an organization's cybersecurity posture.
You will work closely with security operations, threat analysts, and IT teams to improve threat detection, automate response workflows, and enhance overall security operations.

Key Responsibilities

SIEM Administration & Engineering

• Design, implement, configure, and optimize SIEM platforms.
  
• Develop and maintain correlation rules, dashboards, alerts, and reports for security monitoring.
  
• Integrate logs and telemetry from networks, endpoints, cloud platforms, and applications.
  
• Optimize data ingestion, parsing, and normalization to improve detection accuracy and platform performance.
  
• Monitor and continuously enhance SIEM effectiveness through tuning and rule optimization.
  

SOAR Development & Automation

• Implement and administer SOAR solutions.
  
• Design and develop automated incident response playbooks.
  
• Automate alert triage, threat intelligence enrichment, and security workflows.
  
• Integrate SOAR with ticketing systems, security tools, and threat intelligence platforms.
  
• Partner with security operations teams to reduce manual effort and improve response times.
  

Security Engineering

• Support incident response activities by developing actionable detections and automation.
  
• Perform root cause analysis on recurring security incidents and implement preventive improvements.
  
• Assist with maintaining security controls that align with compliance and regulatory requirements.
  
• Create technical documentation and provide knowledge sharing to security and IT teams.
  
• Participate in continuous improvement initiatives for security monitoring and response capabilities.
  

Qualifications

Education & Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
  
• At least 5 years of experience in SIEM and/or SOAR administration, engineering, or security operations.
  
• Experience working in a Security Operations Center (SOC) environment is an advantage.
  

Technical Skills

• Hands-on experience with one or more enterprise SIEM platforms.
  
• Experience implementing and managing SOAR solutions, including automation playbook development.
  
• Proficiency in scripting or automation using Python, PowerShell, Bash, or similar languages.
  
• Strong understanding of cybersecurity frameworks such as MITRE ATT&CK, NIST, and CIS Controls.
  
• Experience with endpoint security, network security technologies, threat intelligence platforms, and cloud security environments.
  
• Familiarity with AWS, Microsoft Azure, or Google Cloud security services is an advantage.
  

Soft Skills

• Strong analytical and problem-solving abilities.
  
• Excellent written and verbal communication skills.
  
• Ability to work independently while collaborating effectively with cross-functional teams.
  
• Strong documentation and process improvement skills.