Remote Detection Engineering & Automation Lead

JustMarkets; Philippines; Remote; PHP 1,000,000 - 2,000,000; Full time

Benefits offered by this job

Vacation days 20

Sick leave 10

Public holidays

Medical budget

Remote work

Education budget

Language learning budget

Wellness budget

Job summary

JustMarkets in Philippines is seeking a Detection Engineering & Automation Lead to improve detection quality and automation, identifying high-risk attacker behavior with less noise and faster investigation. You will help build this function from the ground up, shaping processes, strategy and engineering best practices.

You will lead a squad, own the end-to-end detection lifecycle, build rules and playbooks, collaborate across SOC and engineering, and drive metrics-based improvements while

Qualifications

• 5+ years in SOC, Detection Engineering or Security Automation.
• 2+ years hands-on Detection Engineering.
• 1+ year leading or mentoring a team of engineers.
• Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM rules).

Responsibilities

• Lead and develop the Detection Engineering & Automation squad, setting priorities and mentoring team members.
• Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement.
• Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks.
• Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps.
• Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks.
• Ensure critical detections have a clear owner, documentation, and validated testing evidence.
• Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions.

Skills

SOC experience

Threat detection

Automation

Detection engineering

Team leadership

Scripting

MITRE ATT&CK

Detection metrics

Education

Bachelor's degree in Computer Science

Tools

Sigma

YARA

SIEM

SOAR

Python

Job description

JustMarkets in Philippines is seeking a Detection Engineering & Automation Lead to improve detection quality and automation, identifying high-risk attacker behavior with less noise and faster investigation. You will help build this function from the ground up, shaping processes, strategy and engineering best practices.

You will lead a squad, own the end-to-end detection lifecycle, build rules and playbooks, collaborate across SOC and engineering, and drive metrics-based improvements while