Senior SOC Platform Engineer: SIEM/SOAR & Detections

NCS Philippines; Taguig; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

NCS Philippines is seeking a seasoned SOC Platform Engineer to lead the engineering, integration, optimisation, and maintenance of SIEM, SOAR, and log management platforms. The role focuses on building and improving the security platform beyond day-to-day SOC analyst activities.

You will drive platform uplift, detections, automation, and customer guidance, collaborating with SOC analysts and stakeholders to translate requirements into robust security solutions.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Security, Engineering, or related discipline.
• Minimum 5 years of relevant experience in SecOps/SOC platform engineering.
• Hands-on experience with SIEM and/or SOAR platforms.

Responsibilities

• Engineer, integrate, optimise, and maintain SOC platforms such as SIEM, SOAR, and log management technologies.
• Onboard and integrate security log sources into the SOC platform; ensure data quality.
• Develop, configure, and fine-tune detection rules and correlation use cases.
• Configure and optimise SOAR playbooks, workflows, and integrations.
• Perform platform patching, upgrades, and maintenance and drive continuous uplift.
• Provide technical support for platform, ingestion, integration, and detection issues; conduct root-cause analysis.
• Collaborate with customers and SOC teams to understand monitoring requirements and provide guidance.

Skills

Analytical skills

Troubleshooting

Security platform engineering

Detections tuning

Documentation

Education

Bachelor's degree (CS/IT/Cybersecurity)

Tools

SIEM

SOAR

Job description

NCS Philippines is seeking a seasoned SOC Platform Engineer to lead the engineering, integration, optimisation, and maintenance of SIEM, SOAR, and log management platforms. The role focuses on building and improving the security platform beyond day-to-day SOC analyst activities.

You will drive platform uplift, detections, automation, and customer guidance, collaborating with SOC analysts and stakeholders to translate requirements into robust security solutions.