About this role
The Position Join our team as a Senior SIEM Engineer for Cybersecurity Detection. As a member of the Cyber Intelligence & Security Operations Center (CISOC), you will play a key role in strengthening the organization's cyber defense capabilities through security monitoring, detection engineering, and automation. This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.
Duties and Responsibilities: Implement new security use cases on the SIEM/XDR. Use case fine-tuning to decrease the ratio of false positives. Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies.
Maintenance of existing scripts and integrations. Support the implementation and maintenance of simulated threats to automatically test and enhance use cases. Evolve current technologies according to defined roadmap.
Collaboration on the improvement of the security detection capabilities with Security Detection and Incident Response team Act as point of contact for managing & delivering various reports & dashboards. Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.
Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management. Abour our future employee: The ideal candidate will have a strong knowledge of: Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender. Certification is a plus.
Programming experience in scripting languages (Python, PowerShell, Bash) and API integration. Desired experience in BAS (breach & attack simulation) threat creation. Proven experience in reporting/ticketing platforms like ServiceNow.
Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage. Excellent spoken and written English. Experience working in a virtual, international and multicultural environment.
Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills. Security certifications like Security+ CE, GCIH, ECIH, OSCP, CEH are desired but not mandatory. Click here to know what it looks like working at Boehringer Ingelheim Business Services Philippines Inc.