Security Engineer (SIEM & SOAR)

Risewave Consulting, Inc.; Metro Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Risewave Consulting, Inc. is seeking a Specialist/Team Lead - Security Engineering to drive the design, implementation, and optimization of SIEM and SOAR capabilities. You will mentor engineers and support security operations transformation initiatives.

You will lead the creation of detection use cases, dashboards, and automated incident response playbooks, while coordinating with SOC, Threat Hunting, and Incident Response teams to improve efficiency and security outcomes.

Qualifications

• 3–5 years of cybersecurity experience with hands‑on SIEM/SOAR engineering
• Experience leading small teams, workstreams or engineering initiatives
• SOC experience is highly preferred
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field

Responsibilities

• Design and implement scalable SIEM architectures for enterprise environments.
• Develop advanced detection use cases, correlation rules, dashboards, and reporting.
• Drive log management improvements for visibility and threat detection.
• Provide technical leadership during SIEM deployments and enhancements.
• Lead automated incident response playbooks and SOAR workflows.
• Collaborate with SOC, Threat Hunting and IR teams to boost ops effectiveness.

Skills

SIEM engineering

SOAR engineering

Team leadership

Python scripting

Threat hunting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google SecOps

QRadar

ArcSight

Job description

Our client is looking for a Specialist/Team Lead - Security Engineering to join its Cybersecurity team. In this role, you will lead the design, implementation, and optimization of SIEM and SOAR capabilities, while mentoring engineers and supporting security operations transformation initiatives.

What You'll Do

• Design and implement scalable SIEM architectures across enterprise environments.
• Lead the development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive continuous improvements in log management, visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.

SOAR & Security Automation

• Lead the development of automated incident response playbooks and orchestration workflows.
• Identify automation opportunities that improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.
• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review engineering deliverables and ensure adherence to cybersecurity best practices.
• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

What We're Looking For

Qualifications

• 3-5 years of relevant cybersecurity experience, with strong hands-on expertise in SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Strong hands-on experience in one or more SIEM platforms:
• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, or Bash scripting.
• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.
• Experience with cloud security technologies and modern security operations tools.