Security Engineer (SIEM & SOAR) | Specialist / Team Lead

Gratitude Philippines; Philippines; Hybrid; PHP 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Hybrid work arrangement

Cubao office location

Shifting schedules

Job summary

Accenture is seeking a Specialist/Team Lead in Cybersecurity to design, implement, and optimize SIEM and SOAR capabilities. You will mentor engineers, align security operations with business goals, and drive security transformation initiatives.

The role emphasizes leadership of SIEM deployments, automation of incident response, and collaboration with various security teams to improve detection, response times, and overall security posture.

Qualifications

• 3-5 years of relevant cybersecurity experience with hands-on SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Responsibilities

• Design and implement scalable SIEM architectures across enterprise environments.
• Lead development of detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive improvements in log management, visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.
• Lead development of automated incident response playbooks and orchestration workflows.
• Identify automation opportunities to improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intel, ticketing systems, and security technologies.
• Collaborate with SOC, Threat Hunting, and Incident Response teams to improve operations.

Skills

SIEM/SOAR engineering

Team leadership

SOC experience

Scripting (Python/PowerShell/Bash)

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google SecOps

QRadar

ArcSight

Job description

WORK SETUP: Hybrid in Cubao

WORK SHIFT: Shifting

Salary budget: Confidential (will be discussed during the offer stage)

Lead Security Engineering and Automate Cyber Defense

Join Accenture’s Cybersecurity team as a Specialist/Team Lead, where you will lead the design, implementation, and optimization of SIEM and SOAR capabilities while mentoring engineers and supporting security operations transformation initiatives.

What You’ll Do

SIEM Engineering

• Design and implement scalable SIEM architectures across enterprise environments.
• Lead development of advanced detection use cases, correlation rules, dashboards, and reporting capabilities.
• Drive continuous improvements in log management, visibility, and threat detection effectiveness.
• Provide technical leadership during SIEM deployments and enhancements.

SOAR & Security Automation

• Lead development of automated incident response playbooks and orchestration workflows.
• Identify automation opportunities that improve SOC efficiency and reduce response times.
• Integrate SOAR platforms with threat intelligence, ticketing systems, and security technologies.
• Partner with SOC, Threat Hunting, and Incident Response teams to improve operational effectiveness.

Team Leadership & Operations

• Serve as the technical lead for assigned projects and initiatives.
• Coach and mentor junior security engineers and analysts.
• Review engineering deliverables and ensure adherence to cybersecurity best practices.
• Collaborate with clients and stakeholders to translate business requirements into technical solutions.

What We’re Looking For

Qualifications

• 3-5 years of relevant cybersecurity experience, with strong hands‑on expertise in SIEM and/or SOAR engineering.
• Experience leading small teams, workstreams, or engineering initiatives.
• SOC experience is highly preferred.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Technical Skills

Strong hands‑on experience in one or more SIEM platforms:

• Splunk
• Microsoft Sentinel
• Google SecOps
• QRadar
• ArcSight
• Experience designing and implementing SOAR playbooks and automation workflows.
• Proficiency in Python, PowerShell, or Bash scripting.
• Strong understanding of MITRE ATT&CK, NIST, CIS Controls, and detection engineering concepts.
• Experience with cloud security technologies and modern security operations tools.

Work Setup

• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules

Additional details:

• Open to applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role