Senior SIEM Engineer for Cybersecurity Detection

Boehringer Ingelheim Business Services Philippines, Inc.; Muntinlupa; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

Boehringer Ingelheim Business Services Philippines, Inc. is seeking a Senior SIEM Engineer to strengthen cyber defense through security monitoring, detection engineering, and automation.

You will develop and enhance SIEM/XDR use cases, integrate security technologies, and collaborate with cross-functional teams to identify and mitigate security risks. The ideal candidate has expertise in SIEM/XDR use cases (Splunk Enterprise Security, Microsoft Sentinel or Defender), scripting (Python,

Qualifications

• Proven experience in development of security use cases for SIEM/XDR.
• Programming experience in scripting languages (Python, PowerShell, Bash) and API integration.
• Desired experience in BAS (breach & attack simulation) threat creation.
• Proven experience in reporting/ticketing platforms like ServiceNow.
• Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage.
• Excellent spoken and written English.
• Experience working in a virtual, international and multicultural environment.
• Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills.
• Security certifications like Security+ CE, GCIH, ECIH, OSCP, CEH are desired but not mandatory.

Responsibilities

• Implement new security use cases on the SIEM/XDR.
• Use case fine-tuning to decrease the ratio of false positives.
• Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies.
• Maintenance of existing scripts and integrations.
• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases.
• Evolve current technologies according to defined roadmap.
• Collaboration on the improvement of the security detection capabilities with Security Detection and Incident Response team
• Act as point of contact for managing & delivering various reports & dashboards.
• Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.
• Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management.

Skills

Security monitoring

Detection engineering

Python

PowerShell

Bash

API integration

BAS

ServiceNow

English communication

Team collaboration

Tools

Splunk Enterprise Security

Microsoft Sentinel

Microsoft Defender

ServiceNow

Job description

The Position

Join our team as a Senior SIEM Engineer for Cybersecurity Detection.
As a member of the Cyber Intelligence & Security Operations Center (CISOC), you will play a key role in strengthening the organization's cyber defense capabilities through security monitoring, detection engineering, and automation. This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.

Duties and Responsibilities

• Implement new security use cases on the SIEM/XDR.


• Use case fine-tuning to decrease the ratio of false positives.


• Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies.


• Maintenance of existing scripts and integrations.


• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases.


• Evolve current technologies according to defined roadmap.


• Collaboration on the improvement of the security detection capabilities with Security Detection and Incident Response team


• Act as point of contact for managing & delivering various reports & dashboards.


• Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.


• Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management.

Abour our future employee

The ideal candidate will have a strong knowledge of:

• Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender. Certification is a plus.


• Programming experience in scripting languages (Python, PowerShell, Bash) and API integration.


• Desired experience in BAS (breach & attack simulation) threat creation.


• Proven experience in reporting/ticketing platforms like ServiceNow.


• Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage.


• Excellent spoken and written English.


• Experience working in a virtual, international and multicultural environment.


• Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills.


• Security certifications like Security+ CE, GCIH, ECIH, OSCP, CEH are desired but not mandatory.