Senior SecOps Platform Engineer

NCS Philippines; Taguig; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

NCS Philippines is seeking a seasoned SOC Platform Engineer to lead the engineering, integration, optimisation, and maintenance of SIEM, SOAR, and log management platforms. The role focuses on building and improving the security platform beyond day-to-day SOC analyst activities.

You will drive platform uplift, detections, automation, and customer guidance, collaborating with SOC analysts and stakeholders to translate requirements into robust security solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Engineering, or related discipline.
• Minimum 5 years of relevant experience in SecOps/SOC platform engineering.
• Hands-on experience with SIEM and/or SOAR platforms.

Responsibilities

• Engineer, integrate, optimise, and maintain SOC platforms such as SIEM, SOAR, and log management technologies.
• Onboard and integrate security log sources into the SOC platform; ensure data quality.
• Develop, configure, and fine-tune detection rules and correlation use cases.
• Configure and optimise SOAR playbooks, workflows, and integrations.
• Perform platform patching, upgrades, and maintenance and drive continuous uplift.
• Provide technical support for platform, ingestion, integration, and detection issues; conduct root-cause analysis.
• Collaborate with customers and SOC teams to understand monitoring requirements and provide guidance.

Skills

Analytical skills

Troubleshooting

Security platform engineering

Detections tuning

Documentation

Education

Bachelor's degree (CS/IT/Cybersecurity)

Tools

SIEM

SOAR

Job description

Company Overview

NCS is a leading AI Tech Services company. With a 15,000-strong team across the Asia Pacific, NCS scales its platforms and capabilities to provide clients with greater agility and AI expertise across a range of industries. Embracing a strong ecosystem of global partners, NCS transforms technology services delivery combining AI with digital resilience to drive real business impact. NCS is a subsidiary of the Singtel Group.

GENERAL RESPONSIBILITIES:

The role is responsible for the engineering, integration, optimisation, and maintenance of SOC platforms, particularly SIEM, SOAR, and log management technologies. The role focuses on building and improving the security platform rather than performing day-to-day SOC analyst activities.

DUTIES AND RESPONSIBILITIES:

1. SOC Platform Engineering

   • Configure, maintain, and fine-tune SIEM, SOAR, and other SOC platforms.

   • Optimise platform performance, reliability, and detection capabilities.

   • Troubleshoot platform and integration issues.

2. Log Source Integration

   • Onboard and integrate security and technology log sources into the SOC platform.

   • Configure ingestion, parsing, normalisation, and enrichment.

   • Validate data quality and troubleshoot ingestion issues.

3. Detection Engineering

   • Develop, configure, and fine-tune detection rules and correlation use cases.

   • Translate customer security requirements into actionable detections.

   • Take onboarded log sources through to customer-specific detection capabilities.

4. SOAR and Automation

   • Configure and optimise SOAR playbooks, workflows, and integrations.

   • Support security automation and automated enrichment/response capabilities.

5. Platform Maintenance and Uplift

   • Perform platform patching, upgrades, configuration changes, and maintenance.

   • Support continuous improvement and uplift of SOC platform capabilities.

6. Operations and Troubleshooting

   • Provide technical support for platform, ingestion, integration, and detection issues.

   • Conduct root-cause analysis and implement corrective actions.

   • Monitor platform health and performance.

7. Customer and Stakeholder Support

   • Work with customers and SOC teams to understand monitoring and detection requirements.

   • Provide technical guidance on log onboarding, integrations, detections, and automation.

   • Maintain technical documentation and support knowledge transfer.

JOB SPECIFICATIONS:

• Education- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Engineering, or related discipline. Relevant cybersecurity or vendor certifications are an advantage.

• Related Work Experience - Minimum 5 years of relevant experience in SecOps/SOC platform engineering.

  • Hands-on experience with SIEM and/or SOAR platforms.

  • Experience onboarding and integrating multiple log sources.

  • Experience developing and fine-tuning security detections and monitoring use cases.

  • Experience with SOC platform maintenance, patching, upgrades, and troubleshooting.

  • Experience in an enterprise SOC, MSSP, managed security services, or cybersecurity operations environment.

• Knowledge

  • Security Operations (SOC) platforms, technologies, and operating concepts

  • SIEM, SOAR, and security log management technologies

  • Security event collection, log source onboarding, ingestion, and data pipelines

  • Log parsing, normalization, enrichment, and data quality concepts

  • Detection engineering, correlation rules, and security monitoring use cases

  • Security automation, orchestration, and SOAR playbook concepts

  • Security platform integrations, including APIs, Syslog, and related integration methods

  • SOC platform administration, configuration, performance monitoring, and troubleshooting

  • Platform lifecycle management, including patching, upgrades, and configuration changes

• Skills

• Strong analytical, problem-solving, and technical troubleshooting skills

• Ability to engineer, configure, integrate, and optimize security platforms

• Ability to develop, tune, and improve security detections and related use cases

• Ability to translate customer and operational requirements into practical technical solutions

• Strong technical documentation and communication skills

• Ability to collaborate effectively with SOC analysts, security engineers, technical teams, and customers

• Strong technical ownership, accountability, and attention to quality

• Continuous improvement mindset with the ability to identify and implement platform enhancements

• Effective stakeholder management and customer orientation

• Ability to share technical knowledge and provide guidance to relevant teams