Principal SIEM/XDR Security Engineer (Hybrid)

Nityo Infotech Services Philippines Inc.; Muntinlupa; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Nityo Infotech Services Philippines Inc. is seeking a security engineer to develop and refine SIEM/XDR use cases, integrating Splunk ES, Microsoft Sentinel, and Defender to enhance detection accuracy.

You will script and automate via Python, PowerShell, or Bash, work with BAS testing, and produce security monitoring dashboards and reports. The role is hybrid in Alabang with EU Timezone flexibility.

Qualifications

• Proven experience developing SIEM/XDR security use cases.
• Hands-on experience with Splunk Enterprise Security, Microsoft Sentinel, and Microsoft Defender.
• Strong scripting in Python, PowerShell or Bash; API integration experience.

Responsibilities

• Develop and implement new security use cases for SIEM/XDR platforms.
• Fine-tune existing use cases to reduce false positives and improve detection.
• Develop and maintain scripts, APIs, and integrations to enrich SIEM/XDR capabilities.
• Support BAS threats for automated detection testing.
• Maintain and enhance security integrations and automation.
• Evolve security detection technologies based on the technology roadmap.
• Collaborate with Security Detection and Incident Response teams to improve detection and response.
• Manage and deliver security monitoring reports and dashboards.
• Ensure documentation per SOPs, working instructions, and governance requirements.
• Present security monitoring status, trends, and updates to technology SMEs and management.
• Collaborate with risk and information security teams on monitoring initiatives.

Skills

SIEM/XDR use cases

Python

PowerShell

Bash

API integration

Security automation

BAS

ServiceNow

Security monitoring & detection

English communication

Multicultural environments

Analytical skills

Tools

Splunk Enterprise Security

Microsoft Sentinel

Microsoft Defender

Job description

Nityo Infotech Services Philippines Inc. is seeking a security engineer to develop and refine SIEM/XDR use cases, integrating Splunk ES, Microsoft Sentinel, and Defender to enhance detection accuracy.

You will script and automate via Python, PowerShell, or Bash, work with BAS testing, and produce security monitoring dashboards and reports. The role is hybrid in Alabang with EU Timezone flexibility.