SIEM & SOAR Engineer - Automate Threat Detection

Accenture; Philippines; Hybrid; PHP 1,100,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary

Bonus & 13th Month Pay

Day 1 HMO & Life Insurance

Flexible working arrangements

Training & Certifications

Expanded parental benefits

Employee Stock Purchase Plan

Inclusive culture

Job summary

Accenture's Cybersecurity team is seeking professionals to design, engineer, and optimize next-generation security monitoring capabilities. You will work on SIEM and SOAR implementations, integrating telemetry from cloud, endpoints, networks, and applications to improve threat detection and response.

The role involves developing automated playbooks, dashboards, and reports, and collaborating with SOC analysts to reduce investigation times.

Qualifications

• 3–8 years of cybersecurity experience with hands-on SIEM and/or SOAR engineering.
• SOC experience is highly preferred.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.

Responsibilities

• Design, implement, and optimize SIEM solutions (Splunk, Sentinel, Google SecOps, QRadar, ArcSight).
• Develop and enhance correlation rules, dashboards, alerts, and reports to improve threat visibility.
• Build and maintain automated incident response playbooks using Cortex XSOAR, Splunk SOAR, or IBM Resilient.
• Collaborate with SOC analysts to streamline investigations and reduce response times.
• Provide security operations support with detections, automation-driven insights, and documentation.

Skills

SIEM

SOAR engineering

Python

Cloud security

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Splunk

Microsoft Sentinel

Google Security Operations

QRadar

ArcSight

Job description

Accenture's Cybersecurity team is seeking professionals to design, engineer, and optimize next-generation security monitoring capabilities. You will work on SIEM and SOAR implementations, integrating telemetry from cloud, endpoints, networks, and applications to improve threat detection and response.

The role involves developing automated playbooks, dashboards, and reports, and collaborating with SOC analysts to reduce investigation times.