Security Engineer (SIEM & SOAR) | Specialist / Team Lead

Gratitude Philippines; Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Hybrid work setup

Job summary

Gratitude Philippines is seeking a Security Engineer (SIEM & SOAR) to own security engineering initiatives, lead SIEM and SOAR deployments, and mentor junior engineers in a hybrid Cubao setup. The role combines hands-on engineering with technical leadership and collaboration with global teams.

The ideal candidate has 3–5 years of cybersecurity experience, strong SIEM/SOAR expertise, and the ability to translate business requirements into effective security solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Responsibilities

• Design and implement scalable SIEM architectures across enterprise environments.

Skills

SIEM engineering

SOAR engineering

Threat detection

Security automation

Leadership

SOC experience

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google SecOps

IBM QRadar

ArcSight

Job description

Security Engineer (SIEM & SOAR) | Specialist / Team Lead

Location: Cubao, Quezon City

Work Setup: Hybrid

Schedule: Shifting Schedule

Employment Type: Full-Time

Lead Security Engineering. Automate Cyber Defense. Build What's Next.

Are you a skilled Cybersecurity Engineer with hands‑on expertise in SIEM, SOAR, threat detection, and security automation?

We are looking for a Security Engineer (SIEM & SOAR) – Specialist / Team Lead to take technical ownership of security engineering initiatives, lead SIEM and SOAR implementation, mentor cybersecurity professionals, and help transform modern security operations.

This is an excellent opportunity for a cybersecurity professional who is ready to combine deep technical expertise with technical leadership and client‑facing responsibilities.

What You'll Do

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.
• Develop and optimize advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive continuous improvements in log management, security visibility, and threat detection effectiveness.
• Provide technical leadership throughout SIEM deployments, integrations, and enhancements.
• Ensure security engineering solutions align with industry best practices and organizational requirements.

SOAR & Security Automation

• Design and develop automated incident‑response playbooks and orchestration workflows.
• Identify opportunities to automate repetitive SOC activities and improve response efficiency.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and other security technologies.
• Partner with SOC, Threat Hunting, and Incident Response teams to strengthen security operations.
• Help reduce response times while improving detection and incident‑handling capabilities.

Technical Leadership & Operations

• Serve as the technical lead for assigned cybersecurity projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review technical deliverables and ensure adherence to cybersecurity standards and best practices.
• Collaborate with clients and stakeholders to understand business requirements and translate them into effective technical solutions.
• Contribute technical expertise to security operations transformation initiatives.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3-5 years of relevant cybersecurity experience, with strong hands‑on SIEM and/or SOAR engineering expertise.
• Demonstrated experience leading small teams, workstreams, projects, or engineering initiatives.
• Experience working in a Security Operations Center (SOC) is highly preferred.
• Strong communication, analytical, troubleshooting, and stakeholder‑management skills.

Technical Expertise

Hands‑on experience with one or more of the following SIEM platforms:

• Splunk
• Microsoft Sentinel
• Google SecOps
• IBM QRadar
• ArcSight

You should also have:

• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, and/or Bash scripting.
• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering.
• Experience with cloud security technologies and modern security operations tools.
• Strong understanding of threat detection, security monitoring, and incident response processes.

Why This Opportunity?

This role is built for cybersecurity professionals who want to move beyond day-to-day engineering and take greater ownership of security transformation, technical leadership, automation, and team development.

You’ll have the opportunity to:

• Lead enterprise SIEM engineering initiatives
• Build intelligent SOAR automation and response workflows
• Mentor and develop cybersecurity talent
• Work with modern security technologies
• Collaborate with global clients and security teams
• Drive improvements in detection and response capabilities

Qualified candidates will proceed through the required validation and assessment stages.

Ready to Lead the Future of Cyber Defense?

If you're an experienced SIEM/SOAR Engineer, Security Engineer, SOC Engineer, or Cybersecurity Specialist ready to take on technical leadership responsibilities, this could be your next career opportunity.