Senior SOC Technical SME – SIEM & Detection

evans & chambers technology; Philippines; Hybrid; PHP 1,200,000 - 2,400,000; Full time

Job summary

Evans & Chambers Technology seeks a highly skilled Security Operations Center Technical SME to join our IT team. You will serve as the technical backbone of a 24/7 SOC, specializing in log analysis, SIEM administration and tuning, and detection engineering.

You will interrogate high-volume log sources, identify gaps in visibility, maintain detection content, mentor junior analysts, and collaborate with the SOC Program Manager to report metrics and drive improvements.

Qualifications

• Seven+ years in information security with depth in SIEM administration/engineering, log analysis and SOC tools.
• Experience with one or more SIEM platforms (Splunk, QRadar, Elastic, Sentinel) is required.
• CySA+/GCIA/GCIH or CISSP is required.

Responsibilities

• Deeply analyze and interrogate logs across network, host, application, cloud and identity sources to identify anomalies and gaps.
• Tune and optimize SIEM platforms to improve detection fidelity and reduce false positives/negatives.
• Evaluate log volume, retention and ingestion pipelines to ensure data completeness.
• Develop, refine and maintain correlation rules, use cases and detection content.
• Serve as escalation point for Tier 1/2 analysts on complex triage and investigations.
• Utilize and maintain proficiency across security tool stacks (SIEM, EDR, NDR, SOAR, threat intel).
• Support containment, eradication and recovery during incidents as a senior responder.
• Collaborate to report SOC metrics, detection coverage and operational effectiveness.

Skills

Log analysis

SIEM admin

Detection engineering

Threat intel

Mentoring

Education

Bachelor's degree in Computer Science/Information Systems/Engineering

Tools

Splunk

QRadar

Elastic

Sentinel

Job description

Evans & Chambers Technology seeks a highly skilled Security Operations Center Technical SME to join our IT team. You will serve as the technical backbone of a 24/7 SOC, specializing in log analysis, SIEM administration and tuning, and detection engineering.

You will interrogate high-volume log sources, identify gaps in visibility, maintain detection content, mentor junior analysts, and collaborate with the SOC Program Manager to report metrics and drive improvements.