Cyber Security Engineer

JMR Global | Talent Solutions; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

JMR Global | Talent Solutions in the Philippines is seeking a Cybersecurity Engineer focused on SIEM/SOAR engineering to build detection, automation, and response capabilities for a proactive security operations posture.

The role involves implementing and tuning detection, developing playbooks, and integrating security tools across cloud, endpoint, identity, and network environments, while staying ahead of evolving threats and supporting SOC activities.

Qualifications

• Hands-on experience with SIEM and/or SOAR platforms.
• Knowledge of SIEM tools such as Splunk, Microsoft Sentinel, Google SecOps, QRadar or ArcSight.
• Experience building SOAR playbooks and automation.
• Familiarity with MITRE ATT&CK and CIS Controls.
• Time spent in a SOC environment is highly beneficial.

Responsibilities

• Build and refine detection use cases and correlation rules.
• Develop and maintain SOAR playbooks and automated response workflows.
• Implement and configure security tool integrations across cloud, endpoint, identity, and network.
• Build and tune detection and automation capabilities for SOC, threat hunting, and incident response.
• Stay current on the threat landscape and translate changes into upgrades to tooling.

Skills

SIEM/SOAR platforms

Splunk

Microsoft Sentinel

QRadar

ArcSight

MITRE ATT&CK

CIS Controls

SOC experience

Tools

Splunk

Microsoft Sentinel

QRadar

ArcSight

Job description

This Cybersecurity Engineer role centers on SIEM/SOAR engineering, focused on detecting threats, responding to them quickly, and staying ahead of what's coming next.

This is a build and implementation role. You take security designs and turn them into working, operational solutions, standing up the detection capabilities, automations, and platforms that power the team's threat detection and response.

What You'll Do

• Build and refine detection use cases and correlation rules to sharpen how threats get surfaced
• Develop and maintain SOAR playbooks and automated response workflows to speed up incident handling
• Implement and configure security tool integrations across cloud, endpoint, identity, and network environments, based on the broader security design
• Build and tune the detection and automation capabilities that support SOC, threat hunting, and incident response teams
• Stay current on the threat landscape and translate what's changing into concrete upgrades to detection and response toolingPitch in on audit and compliance work when the security side needs technical input

What We're Looking For

• Hands-on experience with SIEM and/or SOAR platforms
• Practical knowledge of one or more SIEM tools (such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight)
• Comfort building and maintaining SOAR playbooks and automation
• Working familiarity with frameworks like MITRE ATT&CK and CIS Controls
• Time spent in a SOC environment goes a long way toward hitting the ground running here