IT Security Analyst

Scan Global Logistics; Muntinlupa; Presencial; PHP 600.000 - 1.000.000; Jornada completa

Descripción de la vacante

Scan Global Logistics is seeking a skilled Security Operations Center (SOC) Analyst in the Philippines to monitor, detect, and respond to cyber threats. You will perform threat hunting, analyze CTI, and develop analytic rules to strengthen security postures across IT and OT environments.

The role requires hands-on experience with SIEM (Microsoft Sentinel), strong analytical skills, and the ability to present findings clearly to stakeholders.

Formación

• 3–5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel.
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Responsabilidades

• Perform day-to-day monitoring, investigation, triage, containment, and handling of security incidents and alerts.
• Conduct proactive threat hunting activities to identify suspicious, anomalous, or malicious activities across the environment.
• Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms.
• Analyze cyber threat intelligence feeds, indicators of compromise (IoCs), emerging threats, and attacker behaviors to improve detection and response capabilities.
• Perform threat actor profiling, TTP analysis, and mapping using frameworks such as MITRE ATT&CK.
• Manage IoC lifecycle activities including validation, enrichment, tracking, tuning, and operationalization.
• Utilize threat intelligence platforms such as Recorded Future or similar CTI solutions for threat research and analysis.
• Investigate phishing, malware, endpoint, identity, cloud, and network-related security incidents.
• Correlate logs, telemetry, and intelligence data to identify attack patterns and security gaps.
• Present findings, discuss risks, and provide security recommendations to technical teams, management, and stakeholders.
• Coordinate with internal teams during incident response and remediation activities.
• Continuously improve SOC processes, use cases, playbooks, and detection coverage.

Conocimientos

SOC operations

Incident response

Threat hunting

Cyber threat intelligence

SIEM

Microsoft Sentinel

Analytic rules

Detections

Correlation logic

Alerting mechanisms

KQL

SPL

Communication

Herramientas

Microsoft Sentinel

Descripción del empleo

Job Description:

We are looking for a skilled Security Operations Center (SOC) Analyst with experience in cyber threat intelligence (CTI), threat hunting, analytic rule creation, and incident response. This role will be responsible for day-to-day security operations, proactive threat detection, and threat intelligence analysis to help strengthen the organization’s overall security posture.

Job Duties And Responsibilities

• Perform day-to-day monitoring, investigation, triage, containment, and handling of security incidents and alerts.
• Conduct proactive threat hunting activities to identify suspicious, anomalous, or malicious activities across the environment.
• Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms.
• Analyze cyber threat intelligence feeds, indicators of compromise (IoCs), emerging threats, and attacker behaviors to improve detection and response capabilities.
• Perform threat actor profiling, TTP (Tactics, Techniques, and Procedures) analysis, and mapping using frameworks such as MITRE ATT&CK.
• Manage IoC lifecycle activities including validation, enrichment, tracking, tuning, and operationalization.
• Utilize threat intelligence platforms such as Recorded Future or similar CTI solutions for threat research and analysis.
• Investigate phishing, malware, endpoint, identity, cloud, and network-related security incidents.
• Correlate logs, telemetry, and intelligence data to identify attack patterns and security gaps.
• Present findings, discuss risks, and provide security recommendations to technical teams, management, and stakeholders.
• Coordinate with internal teams during incident response and remediation activities.
• Continuously improve SOC processes, use cases, playbooks, and detection coverage.

Minimum Qualifications

• At least 3–5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands‑on experience with SIEM platforms such as Microsoft Sentinel
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Strong Knowledge Of Cyber Threat Intelligence Concepts Including

• Threat actor profiling
• TTP analysis
• IOC management
• Threat landscape monitoring
• MITRE ATT&CK mapping
• Experience using CTI platforms such as: Recorded Future
• Experience investigating phishing, malware, account compromise, insider threats, and advanced attack activities.
• Knowledge of KQL, SPL, or similar query languages.
• Strong analytical, investigative, documentation, and communication skills.
• Ability to present technical findings clearly to stakeholders and management.

Scan Global Logistics is a Global full-service logistics provider headquartered in the Nordic, who excel in uncomplicating logistics through tailored solutions made by skilled specialists, proud problem-solvers and passionate entrepreneurs.

Since 1975, the core of our DNA has been a ‘can-do-attitude’, agility and the willingness to always go the extra mile and we are not afraid to go left when others go right. For us, every challenge is an opportunity. We go above and beyond to bring anything to anywhere – whether by road, rail, ocean, air or any other modes of transportation.