Senior SIEM/XDR Detection Architect

Hammerjack Pty Ltd; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Boehringer Ingelheim is seeking a Senior SIEM Engineer for Cybersecurity Detection to strengthen our cyber defense through security monitoring, detection engineering, and automation.

This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.

Qualifications

• Proven experience in developing security use cases for SIEM/XDR (Splunk, Sentinel, Defender).
• Scripting in Python, PowerShell, Bash; API integrations.
• Experience with BAS (breach & attack simulation) threat creation.
• Proven experience in reporting/ticketing platforms like ServiceNow.
• Knowledge of remediation, change management, analysis and triage processes.

Responsibilities

• Implement new security use cases on the SIEM/XDR.
• Fine-tune use cases to reduce false positives.
• Develop scripts and integrations to enhance SIEM/XDR capabilities.
• Maintain existing scripts and integrations.
• Support simulated threats to test and improve use cases.
• Evolve technologies according to roadmap.
• Collaborate with Security Detection and Incident Response teams on improvements.
• Prepare and deliver security reports and dashboards.
• Ensure documentation compliance per SOPs and instructions.
• Present monitoring status to technology SMEs and management.

Skills

Security monitoring

Detection engineering

Automation

English communication

Team collaboration

Tools

Splunk Enterprise Security

Microsoft Sentinel

Microsoft Defender

ServiceNow

Job description

Boehringer Ingelheim is seeking a Senior SIEM Engineer for Cybersecurity Detection to strengthen our cyber defense through security monitoring, detection engineering, and automation.

This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.