SIEM Platform Engineer (SIEM & SOAR)

Gratitude Philippines; Philippines; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

Gratitude Philippines is seeking a SIEM Platform Engineer to design, implement, and optimize SIEM and SOAR solutions. The role covers integrating data from networks, endpoints, cloud environments, and applications, with a focus on threat visibility and automation.

You will develop correlations, dashboards, and playbooks, and support SOC activities with automation and tooling integrations.

Qualifications

• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.

Responsibilities

• Design, implement, and optimize SIEM platforms and related security tooling.

Skills

SIEM

SOAR

Python

PowerShell

Bash

MITRE ATT&CK

NIST

CIS Controls

EDR/XDR

Cloud security

Tools

Splunk

Google SecOps

Sentinel

QRadar

ArcSight

Cortex XSOAR

Splunk SOAR

IBM Resilient

Job description

JOB TITLE: SIEM Platform Engineer (SIEM & SOAR)
WORK SETUP: Hybrid in Cubao, Quezon City
WORK SHIFT: Shifting
Salary budget: Confidential (Will be discussed during the job offer)

What You’ll Do

SIEM Engineering

• Design, implement, and optimize SIEM platforms such as Google SecOps, Splunk, QRadar, Microsoft Sentinel, or Elastic.
• Develop correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Integrate security data from networks, endpoints, cloud environments, and applications.
• Improve data quality, parsing, and normalization to enhance detection accuracy.

SOAR & Security Automation

• Build and maintain automated response workflows using SOAR platforms such as Cortex XSOAR, Splunk SOAR, IBM Resilient, or Google SecOps SOAR.
• Develop playbooks for alert triage, incident response, and threat intelligence enrichment.
• Streamline SOC processes through automation and tool integrations.

Security Operations Support

• Support incident response activities through actionable detections and automated workflows.
• Investigate recurring security issues and implement long-term engineering solutions.
• Partner with compliance, audit, and IT teams to strengthen security controls and processes.

What We’re Looking For

• Minimum of 3 years of experience in SIEM and/or SOAR engineering or administration.
• Experience working in a SOC environment is preferred.
• Hands-on experience with at least one major SIEM platform (Google SecOps, Splunk, Sentinel, QRadar, ArcSight, etc.).
• Experience developing SOAR playbooks and security automations.
• Scripting experience in Python, PowerShell, or Bash.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST, or CIS Controls.
• Familiarity with EDR/XDR, IDS/IPS, firewalls, threat intelligence platforms, and cloud security technologies.

Work Setup

• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules