Security Engineer (SIEM & SOAR) – Associate Manager

Gratitude Philippines; Cebu City; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Gratitude Philippines is seeking an Associate Manager to lead enterprise security engineering with a focus on SIEM and SOAR, driving automation-driven operations and strong technical leadership within SOC and threat-hunting teams.

You will oversee security engineering projects, define monitoring strategies, and mentor engineering teams while coordinating with clients and stakeholders in a hybrid work setting in Cubao, Philippines.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• 5–8 years in cybersecurity with SIEM/SOAR experience.
• 2–3+ years in people leadership or team management.
• Proven track record delivering security engineering projects.
• Experience with enterprise security operations and complex environments.

Responsibilities

• Lead design, implementation, and optimization of SIEM and SOAR solutions.
• Define monitoring strategies, detection roadmaps, and automation initiatives.
• Establish engineering standards, processes, and governance.
• Oversee integrations across cloud, endpoint, identity, and network security.
• Provide technical oversight and assurance across initiatives.
• Drive automation programs to improve detection and response times.
• Lead, mentor, and manage cybersecurity engineering teams.
• Coordinate project delivery, staffing, and client communications.

Skills

SIEM/SOAR engineering

People leadership

Security automation

Scripting (Python/PowerShell/Bash)

Threat detection

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google SecOps

IBM QRadar

ArcSight

Job description

Job Overview

We are seeking an Associate Manager specializing in SIEM and SOAR to lead the strategic development, implementation, and optimization of enterprise security engineering capabilities. The role focuses on driving security operations transformation, improving detection and response, leading cybersecurity engineering teams, and delivering automation-driven security solutions.

The successful candidate will provide technical and people leadership while working with SOC teams, threat hunting teams, clients, and other stakeholders to strengthen modern security operations.

Key Responsibilities

Security Engineering Leadership

• Lead the design, implementation, and optimization of enterprise-scale SIEM and SOAR solutions.

• Define security monitoring strategies, detection roadmaps, and security automation initiatives.

• Establish engineering standards, operational processes, and governance models.

• Oversee complex integrations across cloud, endpoint, identity, and network security technologies.

• Provide technical oversight and ensure quality across security engineering initiatives.

Security Operations Transformation

• Drive automation programs to improve detection coverage, incident response times, and operational efficiency.

• Collaborate with SOC leadership, threat hunting teams, and stakeholders to mature security operations capabilities.

• Identify emerging threats and recommend improvements to detection and response strategies.

• Support audit, compliance, risk management, and security governance requirements.

• Promote modern, automation-driven approaches to cybersecurity operations.

People & Delivery Leadership

• Lead, manage, and mentor cybersecurity engineering teams.

• Manage project delivery, staffing, stakeholder engagement, and client communications.

• Provide technical guidance and quality assurance across multiple initiatives.

• Build team capabilities through coaching, training, knowledge sharing, and career development.

• Ensure projects are delivered according to security, quality, and operational standards.

Required Experience

• 5–8 years of relevant cybersecurity experience with strong SIEM and/or SOAR engineering expertise.

• Minimum 2–3 years of people management, supervisory, or cybersecurity team leadership experience.

• Proven experience delivering security engineering projects and client engagements.

• Experience working with enterprise security operations and complex security environments.

Technical Skills

• Deep hands‑on expertise in one or more SIEM platforms:

  • Splunk

  • Microsoft Sentinel

  • Google SecOps

  • IBM QRadar

  • ArcSight

• Experience leading security automation and SOAR programs.

• Strong scripting and automation skills using Python, PowerShell, or Bash.

• Advanced knowledge of MITRE ATT&CK, NIST, CIS Controls, threat detection, and incident response methodologies.

• Experience with cloud security, security architecture, and enterprise security operations.

• Knowledge of security monitoring, detection engineering, automation, and incident response.

Soft Skills

• Strong people leadership and team-management capabilities.

• Excellent communication and stakeholder-management skills.

• Strong analytical and problem-solving abilities.

• Ability to manage multiple initiatives and competing priorities.

• Strong project delivery and organizational skills.

• Ability to coach, mentor, and develop cybersecurity professionals.

• Comfortable working with clients and senior stakeholders.

Education

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Work Requirements

• Work setup: Hybrid.

• Location: Cubao, Philippines.

• Must be amenable to possible shifting schedules.

• Applicants must currently be in the Philippines and already have the legal right to live and work in the Philippines.

• Applicants must not have an active application with Accenture.

• Former employees of Accenture are not eligible to apply.

Recruitment Process

1. Screening with CV Reviewer.

2. Endorsement for validation and further CV screening through Workday, including the HRI toolkit, FCV, and CV.

3. Further review with the hiring team.