SECURITY ENGINEER (SIEM & SOAR) | SPECIALIST / TEAM LEAD

Gratitude Philippines; Cebu City; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Gratitude Philippines is seeking a Security Engineer (SIEM & SOAR) – Specialist / Team Lead to drive security operations from Cubao, Philippines, with a hybrid work model and shifting schedules.

You will lead SIEM and SOAR engineering, automate detections, design SIEM architectures, develop correlation rules, and mentor engineers as part of a dynamic cybersecurity initiative.

Qualifications

• 3–5 years of cybersecurity experience with hands-on SIEM/SOAR experience.
• Experience with Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight.
• Knowledge of Python, PowerShell or Bash, MITRE ATT&CK, NIST, CIS Controls, detection engineering, SOC operations, and cloud security.

Responsibilities

• Lead SIEM and SOAR engineering, security automation, detection engineering, and cybersecurity initiatives.
• Design and optimize SIEM architectures, develop detection use cases and correlation rules.
• Build SOAR playbooks, automate incident response, integrate security tools, and mentor security engineers.

Skills

SIEM/SOAR

Splunk

Microsoft Sentinel

QRadar

ArcSight

Python

PowerShell

Bash

MITRE ATT&CK

NIST

CIS Controls

Detection engineering

SOC operations

Cloud security

Job description

Security Engineer (SIEM & SOAR) – Specialist / Team Lead. Hybrid in Cubao, Philippines. Shifting schedule.

Lead SIEM and SOAR engineering, security automation, detection engineering, and cybersecurity initiatives. Design and optimize SIEM architectures, develop detection use cases and correlation rules, build SOAR playbooks, automate incident response, integrate security tools, and mentor security engineers.

Requirements: 3–5 years of cybersecurity experience with hands-on SIEM/SOAR experience. Experience with Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight. Knowledge of Python, PowerShell or Bash, MITRE ATT&CK, NIST, CIS Controls, detection engineering, SOC operations, and cloud security.

Must be currently in the Philippines with the right to work there and willing to work hybrid in Cubao with shifting schedules.