Senior AI Security Operations Engineer

Rising Tide Digital Inc; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Rising Tide Digital Inc. is seeking a senior cybersecurity engineer to lead multi-vector investigations, design robust threat detection, and drive proactive threat hunting.

You will mentor engineers, contribute to engineering-grade runbooks, and implement resilient SOAR workflows, with heavy emphasis on cloud, identity, endpoint, and application-layer security. Join a fast-paced security team focused on automation, AI-assisted investigations, and on-call escalation readiness in a demanding

Qualifications

• Strong experience in cybersecurity roles such as incident response, threat detection, security engineering, or threat hunting.
• Hands-on cloud IAM, lateral movement, API abuse, malware analysis, and application-layer attacks.
• Proficiency with Splunk, modern EDRs, SOAR tools, and detection-rule tuning.
• Solid Python scripting for data analysis, automation, and API integrations.

Responsibilities

• Lead multi-vector investigations across cloud, identity, endpoint, and application layers.
• Design, build, and tune high-fidelity detection logic in Splunk and cloud telemetry.
• Execute intelligence-led threat hunts to identify unknown TTPs and turn insights into detections.
• Build AI SOC platform enhancements and learnings into scalable automation.
• Create resilient SOAR workflows for automated triage, enrichment, and containment.
• Mentor junior engineers and produce engineering-grade runbooks.

Skills

Cybersecurity experience

Incident response

Threat detection

Threat hunting

Security engineering

Python scripting

Tools

Splunk

EDR tools

SOAR platforms

Job description

• Deep Incident Investigation: Lead multi-vector investigations across cloud, identity, endpoint, and application layers; perform root-cause analysis and participate in a senior on-call escalation rotation.
• Threat Detection Engineering: Design, build, and tune high-fidelity detection logic in Splunk and cloud telemetry while establishing hypothesis-driven testing frameworks.
• Proactive Threat Hunting: Execute intelligence-led threat hunts to identify unknown TTPs and turn insights into durable detections and automation pipelines.
• AI SOC Platform Enhancement: Build decision logic, heuristics, and continuous feedback loops so our AI models learn from investigations and scale autonomous threat response.
• Automation & SOAR: Create resilient SOAR workflows for automated triage, enrichment, and containment.
• Engineering Leadership: Mentor junior engineers, reduce operational friction across SecOps/Cloud/AppSec teams, and produce engineering-grade runbooks.

Qualifications & Requirements

• Strong experience in cybersecurity (incident response, threat detection, security engineering, or threat hunting).
• Technical Depth: Hands-on experience with cloud IAM, lateral movement, API abuse, malware analysis, and application-layer attacks.
• Tooling & Analytics: Strong proficiency with Splunk, modern EDRs, SOAR tools, and detection-rule tuning.
• Scripting: Solid Python scripting skills for data analysis, automation, and API integrations.
• Operational Readiness: Ability to participate in a mandatory senior on-call rotation.