SECURITY ENGINEER (SIEM & SOAR) | SPECIALIST / TEAM LEAD

Gratitude Philippines; Cebu City; Vor Ort; PHP 900.000 - 1.500.000; Vollzeit

Zusammenfassung

Gratitude Philippines is seeking a Security Engineer (SIEM & SOAR) – Specialist / Team Lead to drive security operations from Cubao, Philippines, with a hybrid work model and shifting schedules.

You will lead SIEM and SOAR engineering, automate detections, design SIEM architectures, develop correlation rules, and mentor engineers as part of a dynamic cybersecurity initiative.

Qualifikationen

• 3–5 years of cybersecurity experience with hands-on SIEM/SOAR experience.
• Experience with Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight.
• Knowledge of Python, PowerShell or Bash, MITRE ATT&CK, NIST, CIS Controls, detection engineering, SOC operations, and cloud security.

Aufgaben

• Lead SIEM and SOAR engineering, security automation, detection engineering, and cybersecurity initiatives.
• Design and optimize SIEM architectures, develop detection use cases and correlation rules.
• Build SOAR playbooks, automate incident response, integrate security tools, and mentor security engineers.

Kenntnisse

SIEM/SOAR

Splunk

Microsoft Sentinel

QRadar

ArcSight

Python

PowerShell

Bash

MITRE ATT&CK

NIST

CIS Controls

Detection engineering

SOC operations

Cloud security

Jobbeschreibung

Security Engineer (SIEM & SOAR) – Specialist / Team Lead. Hybrid in Cubao, Philippines. Shifting schedule.

Lead SIEM and SOAR engineering, security automation, detection engineering, and cybersecurity initiatives. Design and optimize SIEM architectures, develop detection use cases and correlation rules, build SOAR playbooks, automate incident response, integrate security tools, and mentor security engineers.

Requirements: 3–5 years of cybersecurity experience with hands-on SIEM/SOAR experience. Experience with Splunk, Microsoft Sentinel, Google SecOps, QRadar, or ArcSight. Knowledge of Python, PowerShell or Bash, MITRE ATT&CK, NIST, CIS Controls, detection engineering, SOC operations, and cloud security.

Must be currently in the Philippines with the right to work there and willing to work hybrid in Cubao with shifting schedules.