Security Engineer (SIEM & SOAR)

Accenture; Philippines; Hybrid; PHP 1,100,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Bonus & 13th Month Pay

Day 1 HMO & Life Insurance

Flexible working arrangements

Training & Certifications

Expanded parental benefits

Employee Stock Purchase Plan

Inclusive culture

Job summary

Accenture's Cybersecurity team is seeking professionals to design, engineer, and optimize next-generation security monitoring capabilities. You will work on SIEM and SOAR implementations, integrating telemetry from cloud, endpoints, networks, and applications to improve threat detection and response.

The role involves developing automated playbooks, dashboards, and reports, and collaborating with SOC analysts to reduce investigation times.

Qualifications

• 3–8 years of cybersecurity experience with hands-on SIEM and/or SOAR engineering.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Responsibilities

• Design, implement, and optimize SIEM solutions (Splunk, Sentinel, Google SecOps, QRadar, ArcSight).
• Develop and enhance correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Build and maintain automated incident response playbooks using Cortex XSOAR, Splunk SOAR, or IBM Resilient.
• Collaborate with SOC analysts to streamline investigations and reduce response times.
• Provide security operations support with detections, automation-driven insights, and documentation.

Skills

SIEM

SOAR engineering

Python

Cloud security

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google Security Operations

QRadar

ArcSight

Job description

Protect, Detect, and Automate Cyber Defense

Join Accenture's Cybersecurity team and play a key role in designing, engineering, and optimizing next-generation security monitoring and response capabilities. If you are passionate about SIEM, SOAR, security automation, and threat detection, this is your opportunity to work with global clients and cutting-edge cybersecurity technologies.

What You'll Do

SIEM Engineering

• Design, implement, and optimize SIEM solutions such as Splunk, Microsoft Sentinel, Google SecOps, QRadar, and Elastic.
• Develop and enhance correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security telemetry from cloud, endpoints, networks, and applications.
• Improve data ingestion, normalization, and parsing to increase detection accuracy and reduce noise.

SOAR & Security Automation

• Build and maintain automated incident response playbooks using platforms such as Cortex XSOAR, Splunk SOAR, or IBM Resilient.
• Automate alert triage, threat intelligence enrichment, and response actions.
• Partner with SOC analysts and threat hunters to streamline investigations and reduce response times.
• Integrate SOAR platforms with ticketing systems, threat feeds, and security controls.

Security Operations Support

• Support incident response through actionable detections and automation-driven insights.
• Perform root cause analysis and develop engineering solutions to address recurring threats.
• Collaborate with compliance and audit teams to strengthen security controls.
• Create documentation and provide enablement sessions for SOC and IT teams.

What We're Looking For

Required Experience

• 3–8 years of cybersecurity experience, with strong hands‑on experience in SIEM and/or SOAR engineering.
• Experience working in a Security Operations Center (SOC) environment is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

• Hands‑on experience with at least one SIEM platform:
  • Splunk
  • Microsoft Sentinel
  • Google SecOps
  • QRadar
  • ArcSight
• Experience developing SOAR playbooks, workflows, and security automations.
• Scripting and automation skills using Python, PowerShell, or Bash.
• Knowledge of MITRE ATT&CK, NIST, CIS Controls, or similar cybersecurity frameworks.
• Familiarity with EDR/XDR, IDS/IPS, firewall technologies, and cloud security (AWS, Azure, or GCP).

Why Join Accenture?

At Accenture, you'll work on impactful projects using emerging technologies while collaborating with some of the industry's top cybersecurity professionals.

Benefits & Perks

• Competitive salary package
• Performance bonus and 13th Month Pay
• Day 1 HMO and Life Insurance coverage
• Flexible working arrangements*
• Company-sponsored training, upskilling, and certifications
• Expanded maternity and paternity benefits*
• Employee Stock Purchase Plan
• Inclusive and collaborative work culture
• *Terms and conditions apply.

Be Part of an Inclusive Workplace

At Accenture, we celebrate diversity and are committed to creating an inclusive environment where everyone can thrive. We welcome applications from all qualified candidates and provide reasonable accommodations throughout the recruitment process.

Equal Employment Opportunity Statement

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.

Accenture is committed to providing veteran employment opportunities to our service men and women.