Senior SIEM Engineer for Cybersecurity Detection (Muntinlupa, Philippines, National Capital Region (NCR))
About this opportunity
The Position
Join our team as a Senior SIEM Engineer for Cybersecurity Detection.
As a member of the Cyber Intelligence & Security Operations Center (CISOC), you will play a key role in strengthening the organization's cyber defense capabilities through security monitoring, detection engineering, and automation. This role focuses on developing and enhancing SIEM/XDR use cases, improving detection effectiveness, integrating security technologies, and collaborating with cross-functional teams to proactively identify and mitigate security risks.
Duties and Responsibilities:
Implement new security use cases on the SIEM/XDR.
Use case fine-tuning to decrease the ratio of false positives.
Implement new scripts and integrations to leverage and/or enrich SIEM/XDR technologies.
Maintenance of existing scripts and integrations.
Support the implementation and maintenance of simulated threats to automatically test and enhance use cases.
Evolve current technologies according to defined roadmap.
Collaboration on the improvement of the security detection capabilities with Security Detection and Incident Response team
Act as point of contact for managing & delivering various reports & dashboards.
Understand BI framework and follow defined processes. Ensure compliant documentation requirements and guarantee its production as required according to the SOPs and working instructions.
Work with various risk & information security teams in presenting security monitoring status & updates to technology subject matter experts & management.
Abour our future employee:
The ideal candidate will have a strong knowledge of:
Proven experience in development of security use cases for SIEM/XDR technologies such as Splunk Enterprise Security, Microsoft Sentinel or Microsoft Defender. Certification is a plus.
Programming experience in scripting languages (Python, PowerShell, Bash) and API integration.
Desired experience in BAS (breach & attack simulation) threat creation.
Proven experience in reporting/ticketing platforms like ServiceNow.
Knowledge of common security weaknesses including remediation processes, prioritization, change management, analysis, & triage.
Excellent spoken and written English.
Experience working in a virtual, international and multicultural environment.
Analytical thinking, good communication, problem solving, results oriented, agility and teamwork skills.
Security certifications like Security+ CE, GCIH, ECIH, OSCP, CEH are desired but not mandatory.
Click here to know what it looks like working at Boehringer Ingelheim Business Services Philippines Inc.
]]>
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 402 comparable Senior Information Technology roles across 43 biopharma companies.
Salary context
53 of 402 peers report a salary range (USD, annualized)
Peers share this role's job function and a matching or adjacent seniority level -- not necessarily the same therapeutic area or country.
Where these roles are based
Top locations among the 402 comparable roles
+ 18 more countries
Seniority mix
402 of 402 peers have a known seniority level
Therapeutic area mix
1 of 402 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.