IT Security Analyst

Scan Global Logistics; Muntinlupa; On-site; PHP 446,000 - 781,000; Full time

Job summary

Scan Global Logistics is seeking a skilled Security Operations Center Analyst with CTI, threat hunting, and incident response to strengthen the organization’s security posture. You will monitor, investigate, triage, and respond to security alerts; develop rules in SIEM, analyze IoCs, and map threats using MITRE ATT&CK.

Collaboration with IT teams is required for effective containment and remediation. The role emphasizes proactive threat detection, threat intelligence analysis, and continuous SOC

Qualifications

• 3–5 years in SOC operations, incident response, threat hunting, or CTI.
• Hands-on with SIEM platforms (e.g., Microsoft Sentinel).
• Experience creating and tuning analytic rules and alerts.

Responsibilities

• Monitor, investigate, triage, contain, and respond to security incidents and alerts.
• Proactively hunt threats to identify suspicious activities across the environment.
• Create and tune analytic/detection rules within SIEM and monitoring platforms.
• Analyze threat intelligence feeds, IoCs, threats, and attacker behaviors.
• Perform TTP analysis and MITRE ATT&CK mapping.
• Manage IoC lifecycle: validation, enrichment, tracking, tuning.
• Use CTI platforms (e.g., Recorded Future) for threat research.
• Investigate phishing, malware, endpoint, identity, cloud, and network incidents.
• Correlate logs/telemetry to identify attack patterns and gaps.
• Present findings and security recommendations to stakeholders.
• Coordinate with internal teams during incident response.
• Improve SOC processes, use cases, and playbooks.

Skills

SOC operations

Threat hunting

Incident response

CTI

MITRE ATT&CK

Microsoft Sentinel

KQL

Analytical skills

Communication skills

Tools

Recorded Future

Microsoft Sentinel

SIEM platforms

Threat intel platforms

Job description

We are looking for a skilled Security Operations Center (SOC) Analyst with experience in cyber threat intelligence (CTI), threat hunting, analytic rule creation, and incident response. This role will be responsible for day-to-day security operations, proactive threat detection, and threat intelligence analysis to help strengthen the organization’s overall security posture.

Job Duties and Responsibilities:

• Perform day-to-day monitoring, investigation, triage, containment, and handling of security incidents and alerts.
• Conduct proactive threat hunting activities to identify suspicious, anomalous, or malicious activities across the environment.
• Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms.
• Analyze cyber threat intelligence feeds, indicators of compromise (IoCs), emerging threats, and attacker behaviors to improve detection and response capabilities.
• Perform threat actor profiling, TTP (Tactics, Techniques, and Procedures) analysis, and mapping using frameworks such as MITRE ATT&CK.
• Manage IoC lifecycle activities including validation, enrichment, tracking, tuning, and operationalization.
• Utilize threat intelligence platforms such as Recorded Future or similar CTI solutions for threat research and analysis.
• Investigate phishing, malware, endpoint, identity, cloud, and network-related security incidents.
• Correlate logs, telemetry, and intelligence data to identify attack patterns and security gaps.
• Present findings, discuss risks, and provide security recommendations to technical teams, management, and stakeholders.
• Coordinate with internal teams during incident response and remediation activities.
• Continuously improve SOC processes, use cases, playbooks, and detection coverage.

Minimum Qualifications:

• At least 3–5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands‑on experience with SIEM platforms such as Microsoft Sentinel
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Strong knowledge of cyber threat intelligence concepts including:

• Threat actor profiling
• TTP analysis
• IOC management
• Threat landscape monitoring
• MITRE ATT&CK mapping
• Experience using CTI platforms such as: Recorded Future
• Experience investigating phishing, malware, account compromise, insider threats, and advanced attack activities.
• Knowledge of KQL, SPL, or similar query languages.
• Strong analytical, investigative, documentation, and communication skills.
• Ability to present technical findings clearly to stakeholders and management.

Scan Global Logistics is a Global full-service logistics provider headquartered in the Nordic, who excel in uncomplicating logistics through tailored solutions made by skilled specialists, proud problem-solvers and passionate entrepreneurs.
Since 1975, the core of our DNA has been a ‘can-do-attitude’, agility and the willingness to always go the extra mile and we are not afraid to go left when others go right. For us, every challenge is an opportunity. We go above and beyond to bring anything to anywhere – whether by road, rail, ocean, air or any other modes of transportation.