Security Engineer SIEM And SOAR

Accenture in the Philippines; Philippines; Hybrid; PHP 600,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Bonus & 13th month pay

Day 1 HMO and Life Insurance

Flexible working arrangements

Training, upskilling & certifications

Maternity & paternity benefits

Employee Stock Purchase Plan

Inclusive culture

Job summary

Accenture in the Philippines is seeking a cybersecurity professional to design, engineer, and optimize SIEM and SOAR defenses for global clients. You will integrate telemetry from cloud, endpoints, networks, and apps, and collaborate with SOC analysts to accelerate investigations.

The role emphasizes automation, incident response playbooks, and security controls across EDR/XDR, cloud security, and threat intelligence, with a flexible work arrangement.

Qualifications

• 3–8 years of cybersecurity experience with hands-on SIEM and/or SOAR engineering.
• Experience in a Security Operations Center (SOC) environment preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Responsibilities

• Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, and Elastic.
• Develop and enhance correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security telemetry from cloud, endpoints, networks, and applications.
• Improve data ingestion, normalization, and parsing to increase detection accuracy and reduce noise.
• Build and maintain automated incident response playbooks using Cortex XSOAR, Splunk SOAR, or IBM Resilient.
• Automate alert triage, threat intelligence enrichment, and response actions.
• Partner with SOC analysts and threat hunters to streamline investigations and reduce response times.
• Integrate SOAR platforms with ticketing systems, threat feeds, and security controls.
• Support incident response through actionable detections and automation-driven insights.
• Perform root cause analysis and develop engineering solutions to address recurring threats.
• Collaborate with compliance and audit teams to strengthen security controls.
• Create documentation and provide enablement sessions for SOC and IT teams.

Skills

SIEM engineering

SOAR engineering

SOC experience

Python scripting

PowerShell scripting

Bash scripting

MITRE ATT&CK

NIST CIS Controls

Cloud security

EDR/XDR familiarity

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google SecOps

QRadar

ArcSight

Cortex XSOAR

Splunk SOAR

IBM Resilient

Job description

Job Description:

Protect, Detect, and Automate Cyber Defense

Join Accenture's Cybersecurity team and play a key role in designing, engineering, and optimizing next-generation security monitoring and response capabilities. If you are passionate about SIEM, SOAR, security automation, and threat detection, this is your opportunity to work with global clients and cutting-edge cybersecurity technologies.

What You’ll Do

SIEM Engineering

• Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, and Elastic.
• Develop and enhance correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security telemetry from cloud, endpoints, networks, and applications.
• Improve data ingestion, normalization, and parsing to increase detection accuracy and reduce noise.

SOAR & Security Automation

• Build and maintain automated incident response playbooks using platforms such as Cortex XSOAR, Splunk SOAR, or IBM Resilient.
• Automate alert triage, threat intelligence enrichment, and response actions.
• Partner with SOC analysts and threat hunters to streamline investigations and reduce response times.
• Integrate SOAR platforms with ticketing systems, threat feeds, and security controls.

Security Operations Support

• Support incident response through actionable detections and automation-driven insights.
• Perform root cause analysis and develop engineering solutions to address recurring threats.
• Collaborate with compliance and audit teams to strengthen security controls.
• Create documentation and provide enablement sessions for SOC and IT teams.

What We’re Looking For

• 3–8 years of cybersecurity experience, with strong hands‑on experience in SIEM and/or SOAR engineering.
• Experience working in a Security Operations Center (SOC) environment is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Hands‑on experience with at least one SIEM platform:
• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience developing SOAR playbooks, workflows, and security automations.
• Scripting and automation skills using Python, PowerShell, or Bash.
• Knowledge of MITRE ATT&CK, NIST, CIS Controls, or similar cybersecurity frameworks.
• Familiarity with EDR/XDR, IDS/IPS, firewall technologies, and cloud security (AWS, Azure, or GCP).

Why Join Accenture?

At Accenture, you'll work on impactful projects using emerging technologies while collaborating with some of the industry's top cybersecurity professionals.

Benefits & Perks

• Competitive salary package
• Performance bonus and 13th Month Pay
• Day 1 HMO and Life Insurance coverage
• Flexible working arrangements*
• Company-sponsored training, upskilling, and certifications
• Expanded maternity and paternity benefits*
• Employee Stock Purchase Plan
• Inclusive and collaborative work culture
• Terms and conditions apply.

Be Part of an Inclusive Workplace

At Accenture, we celebrate diversity and are committed to creating an inclusive environment where everyone can thrive. We welcome applications from all qualified candidates and provide reasonable accommodations throughout the recruitment process.