Security Engineer — SIEM/EDR Automation & Reports

Thrive; Central Luzon; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Thrive is seeking a Security Engineer to join the Security Infrastructure team, focusing on SIEM, EDR, and API security. You will optimize platforms and automate security responses, while supporting client reporting and ServiceNow portal uploads.

A meticulous approach to documentation and staying current with security trends is essential. You will interact with clients, act as a security escalation point, and contribute to cross-team incident handling with FortiSIEM, Elastic SIEM, Microsoft

Qualifications

• 3+ years of hands-on experience designing and managing security engineering systems.
• Proven experience with FortiSIEM, Elastic SIEM, Microsoft Sentinel and Defender XDR.
• Extensive experience with EDR solutions and SOAR tools.
• Familiarity with API security protocols and secure data transmission.
• Ability to analyze large data sets to drive security decisions.
• Strong ability to develop and automate client-facing reports.

Responsibilities

• Manage FortiSIEM, Elastic SIEM, Microsoft Sentinel, and Defender XDR platforms.
• Oversee EDR solutions (FortiEDR, SentinelOne, Defender for Endpoint) to mitigate threats.
• Design automated security use cases and incident response playbooks.
• Oversee API security measures and secure data transmission.
• Collaborate with clients to develop, automate, and upload security reports.
• Create and maintain security process documentation and runbooks.
• Develop client dashboards and metrics; support stakeholder communications.

Skills

SIEM management

EDR solutions

Security reporting

API security

Communication skills

Team collaboration

Threat analysis

Tools

FortiSIEM

Elastic SIEM

Microsoft Sentinel

Defender XDR

FortiEDR

SentinelOne

Job description

Thrive is seeking a Security Engineer to join the Security Infrastructure team, focusing on SIEM, EDR, and API security. You will optimize platforms and automate security responses, while supporting client reporting and ServiceNow portal uploads.

A meticulous approach to documentation and staying current with security trends is essential. You will interact with clients, act as a security escalation point, and contribute to cross-team incident handling with FortiSIEM, Elastic SIEM, Microsoft