SIEM & SOAR Engineer: Threat Detection & Automation

Accenture; Philippines; Hybrid; PHP 850,000 - 1,600,000; Full time

Benefits offered by this job

Salary package

Performance bonus

HMO & Life Insurance

Flexible work

Training & certifications

Maternity/Paternity benefits

ESOP

Inclusive culture

Job summary

Accenture's Cybersecurity team is seeking a skilled SIEM/SOAR engineer to help strengthen defenses across clients. You will design, implement, and automate threat detection, incident response, and security operations using leading SIEM and SOAR technologies.

Hybrid work setup with Cubao office, and opportunities to collaborate with global security professionals. Role requires hands-on SIEM/SOAR experience, scripting skills, and knowledge of industry frameworks.

Qualifications

• Minimum 3 years of SIEM and/or SOAR engineering or admin experience.
• Hands-on with at least one major SIEM platform.
• Experience developing SOAR playbooks and automations.
• Scripting skills in Python, PowerShell, or Bash.
• Familiarity with security frameworks (MITRE ATT&CK, NIST, CIS).

Responsibilities

• Design, implement, and optimize SIEM platforms.
• Develop correlation rules, dashboards, alerts, reports.
• Integrate security data from networks, endpoints, cloud.
• Improve data quality, parsing, and normalization for detection accuracy.
• Build automated SOAR workflows and playbooks.
• Support incident response and automation.

Skills

SIEM engineering

SOAR engineering

SOC experience

Python scripting

PowerShell scripting

Bash scripting

MITRE ATT&CK

NIST CIS Controls

Cloud security

Tools

Google SecOps

Splunk

Microsoft Sentinel

QRadar

ArcSight

Cortex XSOAR

Splunk SOAR

IBM Resilient

Job description

Accenture's Cybersecurity team is seeking a skilled SIEM/SOAR engineer to help strengthen defenses across clients. You will design, implement, and automate threat detection, incident response, and security operations using leading SIEM and SOAR technologies.

Hybrid work setup with Cubao office, and opportunities to collaborate with global security professionals. Role requires hands-on SIEM/SOAR experience, scripting skills, and knowledge of industry frameworks.