Security Operations Engineer - SIEM, SOAR & Automation

Trends Group; Makati; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Trends Group is seeking a security & network operations engineer to provide Tier 2/3 support and optimize security platforms in a fast-paced environment. You will develop detection rules, SOAR playbooks, scripts, and automation workflows to improve service delivery and system reliability.

The role requires hands-on SIEM administration, EDR/NDR, threat intelligence experience, and strong scripting skills. Collaboration with ITSM and monitoring teams will be essential.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field, or equivalent experience.
• Hands-on security and network operations experience, SIEM administration.
• Proficiency in SOAR automation and scripting (Python, PowerShell, Bash).
• Experience with EDR/NDR, threat intelligence, ITSM, and APIs.

Responsibilities

• Provide Tier 2/3 support for security and network operations, troubleshooting complex issues and escalations.
• Administer and optimize SIEM, EDR/NDR, threat intelligence, and monitoring platforms.
• Develop and maintain detection rules, SOAR playbooks, scripts, and automation workflows.
• Manage ITSM, network monitoring, and endpoint management systems.
• Improve operational efficiency, system reliability, threat detection, and service delivery.

Skills

SIEM administration

SOAR automation

Python

PowerShell

Bash

REST APIs

EDR/NDR

Threat intelligence

ITSM

Network monitoring

Endpoint management

Communication

Documentation

Certifications

Education

Bachelor’s degree in Computer Science, Cybersecurity, Network Engineering, or related field

Tools

SIEM platforms

SOAR platforms

EDR/NDR tools

Job description

Trends Group is seeking a security & network operations engineer to provide Tier 2/3 support and optimize security platforms in a fast-paced environment. You will develop detection rules, SOAR playbooks, scripts, and automation workflows to improve service delivery and system reliability.

The role requires hands-on SIEM administration, EDR/NDR, threat intelligence experience, and strong scripting skills. Collaboration with ITSM and monitoring teams will be essential.