Security Engineer – SIEM/SOC Specialist

Gratitude Philippines; Quezon City; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Gratitude Philippines is seeking a Security Engineer to design, implement, and manage security monitoring and automated response capabilities for an enterprise setup. You will partner with SOC teams, threat analysts, and IT stakeholders to improve detection coverage and speed up incident response through automation.

The role focuses on enterprise SIEM/SOAR programs with hands-on experience across multiple platforms and strong scripting skills.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science or related field.
• Minimum 5 years of cybersecurity experience with hands-on SIEM/SOAR engineering exposure.
• SOC environment experience highly preferred.

Responsibilities

• Design, implement, and optimize SIEM solutions (e.g., Splunk, Sentinel, QRadar, ArcSight).
• Develop automated playbooks for incident response, alert triage, and threat intel enrichment.
• Integrate diverse data sources into the SIEM platform and enhance ingestion & normalization.
• Collaborate with SOC analysts to streamline workflows and improve response efficiency.

Skills

SIEM engineering

SOAR automation

Python

PowerShell

Bash

Threat detection

Incident response

Education

Bachelor's degree in Cybersecurity, IT, Computer Science

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

Cortex XSOAR

Splunk SOAR

IBM Resilient

Job description

JOB TITLE:Security Engineer – SIEM/SOC Specialist

WORK SETUP:Onsite, Metro Manila

WORK SHIFT:Shifting schedule

Role Overview

We're hiring Security Engineers to design, implement, and manage security monitoring and automated response capabilities for a leading global organization. You'll work closely with SOC teams, threat analysts, and IT stakeholders to strengthen detection coverage and speed up incident response through automation. This is a great opportunity for a cybersecurity professional looking to work on enterprise-scale SIEM/SOAR programs with a well-established company.

Key Responsibilities

SIEM Engineering & Management

• Design, implement, and optimize SIEM solutions (e.g., Splunk, Microsoft Sentinel, Google SecOps, QRadar, Elastic)
  
• Develop and maintain correlation rules, dashboards, and reports to identify threats and anomalies
  
• Integrate diverse data sources (network, endpoints, cloud, applications) into the SIEM platform
  
• Enhance data ingestion, parsing, and normalization to improve detection quality and reduce noise

SOAR & Automation

• Implement and manage SOAR platforms (e.g., Cortex XSOAR, Splunk SOAR, IBM Resilient)
  
• Develop automated playbooks for incident response, alert triage, and threat intelligence enrichment
  
• Collaborate with SOC analysts to streamline workflows and improve response efficiency
  
• Maintain integrations with ticketing systems, threat intel feeds, and security tools
  

Security Engineering & Operations Support

• Support incident response with actionable alerts and automation-driven insights
  
• Conduct root cause analysis of recurring threats and implement engineering solutions
  
• Partner with audit and compliance teams to align security controls with regulatory standards
  
• Provide training and documentation for SOC and IT teams on SIEM/SOAR platforms
  

Qualifications

Education & Experience

• Bachelor's degree in Cybersecurity, IT, Computer Science, or a related field
  
• Minimum 5 years of cybersecurity experience, with hands-on SIEM/SOAR engineering exposure
  
• SOC environment experience highly preferred

Core Technical Skills

• Proven experience with at least one SIEM platform (Splunk, Sentinel, QRadar, ArcSight, Google SecOps)
  
• Hands-on experience developing SOAR playbooks and automation workflows
  
• Scripting skills (Python, PowerShell, or Bash) for automation and integrations
  
• Working knowledge of frameworks such as MITRE ATT&CK, NIST, or CIS Controls
  
• Familiarity with EDR/XDR, firewalls, IDS/IPS, and cloud security (AWS, Azure, or GCP)
  

Work Setup

• Willing to work a shifting schedule
  
• Open to onsite work in Metro Manila

Pre-Screening Questions

1. How many years of hands-on experience do you have in cybersecurity, specifically with SIEM and SOAR engineering?
   
2. Which SIEM platforms have you worked with (e.g., Splunk, Microsoft Sentinel, QRadar, ArcSight, Google SecOps, Elastic)?
   
3. Have you designed, implemented, or optimized SIEM solutions? Please describe briefly.
   
4. Which SOAR platforms have you worked with (e.g., Cortex XSOAR, Splunk SOAR, IBM Resilient)?
   
5. What is your current/last monthly salary?
   
6. What is your salary expectation?
   
7. Are you open to working onsite in Metro Manila on a shifting schedule?