Cybersecurity Engineer (SIEM & SOAR)

Accenture; Metro Manila; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

Day 1 HMO & Life Insurance

13th Month Pay

Performance bonus

Flexible working arrangements

Training & certifications

Job summary

Accenture is seeking a cybersecurity specialist in the Philippines to strengthen defenses via SIEM and SOAR engineering. You will design, implement, and optimize SIEM/SOAR solutions, develop playbooks, and automate SOC workflows in a hybrid work setup at our Cubao/Central Manila office.

The role requires 3+ years in SIEM/SOAR, hands-on SIEM tooling, and scripting skills (Python/PowerShell/Bash). Collaboration with SOC, compliance, and IT teams is essential to improve overall security posture.

Qualifications

• 3+ years of experience in SIEM and/or SOAR engineering or administration.
• SOC environment experience preferred.
• Hands-on with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight).
• Experience developing SOAR playbooks and security automations.
• Scripting experience in Python, PowerShell, or Bash.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intel platforms, and cloud security technologies.

Responsibilities

• Design, implement, and optimize SIEM platforms (Google SecOps, Splunk, QRadar, Sentinel, Elastic).
• Develop correlation rules, dashboards, alerts, and reports for threat visibility.
• Integrate security data from networks, endpoints, cloud, and applications.
• Improve data quality, parsing, and normalization for better detection.
• Build and maintain automated response workflows using SOAR platforms (XSOAR, Splunk SOAR, IBM Resilient).
• Develop playbooks for alert triage, incident response, and threat intel enrichment.
• Streamline SOC processes through automation and tool integrations.
• Assist incident response with detections and automated workflows.
• Investigate recurring security issues and implement long-term solutions.
• Collaborate with compliance, audit, and IT teams to strengthen controls.

Skills

SIEM engineering

SOAR engineering

SOC collaboration

Python, PowerShell, Bash

MITRE ATT&CK

NIST, CIS Controls

EDR/XDR familiarity

Tools

Google SecOps

Splunk

Microsoft Sentinel

QRadar

ArcSight

Cortex XSOAR

Splunk SOAR

Job description

Join Accenture's Cybersecurity team and help organizations strengthen their defenses through advanced threat detection, security automation, and incident response. You'll work with leading SIEM and SOAR technologies while partnering with SOC analysts and security teams to build scalable, enterprise-grade security solutions.

What You’ll Do

SIEM Engineering

• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.

• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.

• Integrate security data from networks, endpoints, cloud environments, and applications.

• Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation

• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.

• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.

• Streamline SOC processes through automation and tool integrations.

Security Operations Support

• Support incident response activities through actionable detections and automated workflows.

• Investigate recurring security issues and implement long-term engineering solutions.

• Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We’re Looking For

• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.

• Experience working in a SOC environment is preferred.

• Hands‑on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).

• Experience developing SOAR playbooks and security automations.

• Scripting experience in Python, PowerShell, or Bash.

• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.

• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup

• Hybrid work arrangement

• Cubao office location

• Amenable to possible shifting schedules

Why Join Accenture?

At Accenture, you’ll work on impactful projects using emerging technologies while collaborating with some of the industry’s top cybersecurity professionals.

Benefits & Perks

• Competitive salary package

• Performance bonus and 13th Month Pay

• Day 1 HMO and Life Insurance coverage

• Flexible working arrangements*

• Company-sponsored training, upskilling, and certifications

• Expanded maternity and paternity benefits*

• Employee Stock Purchase Plan

• Inclusive and collaborative work culture

*Terms and conditions apply.

Be Part of an Inclusive Workplace

At Accenture, we celebrate diversity and are committed to creating an inclusive environment where everyone can thrive. We welcome applications from all qualified candidates and provide reasonable accommodations throughout the recruitment process.