Senior SOC Technical SME – SIEM & Detection

evans & chambers technology; Philippines; Híbrido; PHP 1.200.000 - 2.400.000; Jornada completa

Descripción de la vacante

Evans & Chambers Technology seeks a highly skilled Security Operations Center Technical SME to join our IT team. You will serve as the technical backbone of a 24/7 SOC, specializing in log analysis, SIEM administration and tuning, and detection engineering.

You will interrogate high-volume log sources, identify gaps in visibility, maintain detection content, mentor junior analysts, and collaborate with the SOC Program Manager to report metrics and drive improvements.

Formación

• Seven+ years in information security with depth in SIEM administration/engineering, log analysis and SOC tools.
• Experience with one or more SIEM platforms (Splunk, QRadar, Elastic, Sentinel) is required.
• CySA+/GCIA/GCIH or CISSP is required.

Responsabilidades

• Deeply analyze and interrogate logs across network, host, application, cloud and identity sources to identify anomalies and gaps.
• Tune and optimize SIEM platforms to improve detection fidelity and reduce false positives/negatives.
• Evaluate log volume, retention and ingestion pipelines to ensure data completeness.
• Develop, refine and maintain correlation rules, use cases and detection content.
• Serve as escalation point for Tier 1/2 analysts on complex triage and investigations.
• Utilize and maintain proficiency across security tool stacks (SIEM, EDR, NDR, SOAR, threat intel).
• Support containment, eradication and recovery during incidents as a senior responder.
• Collaborate to report SOC metrics, detection coverage and operational effectiveness.

Conocimientos

Log analysis

SIEM admin

Detection engineering

Threat intel

Mentoring

Educación

Bachelor's degree in Computer Science/Information Systems/Engineering

Herramientas

Splunk

QRadar

Elastic

Sentinel

Descripción del empleo

Evans & Chambers Technology seeks a highly skilled Security Operations Center Technical SME to join our IT team. You will serve as the technical backbone of a 24/7 SOC, specializing in log analysis, SIEM administration and tuning, and detection engineering.

You will interrogate high-volume log sources, identify gaps in visibility, maintain detection content, mentor junior analysts, and collaborate with the SOC Program Manager to report metrics and drive improvements.