Senior SIEM Engineer for Cybersecurity Detection

Boehringer Ingelheim GmbH; Muntinlupa; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

The Senior SIEM Engineer for Cybersecurity Detection at Boehringer Ingelheim GmbH works within the CISOC to strengthen cyber defenses through detection engineering, automation, and security monitoring. You will develop and enhance SIEM/XDR use cases, integrate security technologies, and collaborate across functions to proactively identify and mitigate risks.

The ideal candidate has hands-on experience with SIEM/XDR platforms (Splunk ES, Microsoft Sentinel/Defender), scripting (Python,

Qualifications

• Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender.
• Programming experience in scripting languages (Python, PowerShell, Bash) and API integration.
• Knowledge of security weaknesses including remediation processes, prioritization, change management, analysis, and triage.
• Excellent spoken and written English.

Responsibilities

• Implement new security use cases on the SIEM/XDR.
• Fine-tune use cases to decrease false positives.
• Implement new scripts and integrations to leverage/enrich SIEM/XDR technologies.
• Maintenance of existing scripts and integrations.
• Support simulated threats to test and enhance use cases.
• Evolve current technologies according to roadmap.
• Collaborate on improving security detection with the team.
• Deliver various reports & dashboards.
• Follow SOPs and ensure compliant documentation.

Skills

Analytical thinking

Communication

Problem solving

Results orientation

Teamwork

Tools

Splunk Enterprise Security

Microsoft Sentinel

Microsoft Defender

ServiceNow

Python

PowerShell

Bash

API integration

Job description

Senior SIEM Engineer for Cybersecurity Detection

The Position

Join our team as a Senior SIEM Engineer for Cybersecurity Detection.
As a member of the Cyber Intelligence & Security Operations Center (CISOC), you will play a key role in strengthening the organization's cyber defense capabilities through security monitoring, detection engineering, and automation. This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.

Duties and Responsibilities:

• Implement new security use cases on the SIEM/XDR.
• Use case fine-tuning to decrease the ratio of false positives.
• Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies.
• Maintenance of existing scripts and integrations.
• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases.
• Evolve current technologies according to defined roadmap.
• Collaboration on the improvement of the security detection capabilities with Security Detection and Incident Response team
• Act as point of contact for managing & delivering various reports & dashboards.
• Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.
• Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management.

The ideal candidate will have a strong knowledge of:

• Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender. Certification is a plus.
• Programming experience in scripting languages (Python, PowerShell, Bash) and API integration.
• Desired experience in BAS (breach & attack simulation) threat creation.
• Proven experience in reporting/ticketing platforms like ServiceNow.
• Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage.
• Excellent spoken and written English.
• Experience working in a virtual, international and multicultural environment.
• Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills.
• Security certifications like Security+ CE, GCIH, ECIH, OSCP, CEH are desired but not mandatory.