Hybrid SIEM & SOAR Platform Engineer

Gratitude Philippines; Manila; Hybrid; PHP 900,000 - 1,700,000; Full time

Benefits offered by this job

Day 1 HMO and Life Insurance coverage

13th Month Pay

Performance bonus

Company-sponsored training

Flexible working arrangements

Employee Stock Purchase Plan

Expanded maternity/paternity benefits

Job summary

Gratitude Philippines is seeking a SIEM Platform Engineer (SIEM & SOAR) to design, implement, and optimize security monitoring and automation platforms. The role focuses on threat visibility, detections, and automated incident response within a hybrid setup at Cubao, Quezon City.

The candidate should have 3+ years of hands-on SIEM/SOAR experience, with familiarity in SOC environments and with platforms like Splunk, Microsoft Sentinel, Google SecOps, or QRadar.

Qualifications

• 3+ years hands-on experience in SIEM and/or SOAR engineering or administration.
• SOC environment experience preferred.
• Experience with a major SIEM platform (Splunk, QRadar, etc.).
• Scripting experience in Python, PowerShell, or Bash.
• Familiar with security frameworks MITRE ATT&CK, NIST, or CIS.
• Knowledge of EDR/XDR, IDS/IPS, firewalls and cloud security.
• Strong analytical and problem-solving skills.

Responsibilities

• Design, implement, configure, and optimize SIEM platforms.
• Develop correlation rules, dashboards, alerts, and reports.
• Integrate security data from networks, endpoints, cloud environments, and applications.
• Build and maintain automated security response workflows with SOAR.
• Create playbooks for alert triage and incident response.
• Support security operations and incident response activities.

Skills

SIEM engineering

SOAR tooling

SOC experience

Python/PowerShell/Bash

MITRE ATT&CK/NIST/CIS

EDR/XDR/cloud security

Troubleshooting

Tools

Splunk

Microsoft Sentinel

Google SecOps

IBM QRadar

ArcSight

Job description

Gratitude Philippines is seeking a SIEM Platform Engineer (SIEM & SOAR) to design, implement, and optimize security monitoring and automation platforms. The role focuses on threat visibility, detections, and automated incident response within a hybrid setup at Cubao, Quezon City.

The candidate should have 3+ years of hands-on SIEM/SOAR experience, with familiarity in SOC environments and with platforms like Splunk, Microsoft Sentinel, Google SecOps, or QRadar.