On-Site Senior Threat Hunter & Detection Engineer (TS/SCI)

Evans & Chambers Technology; Manila; On-site; PHP 8,181,000 - 9,440,000; Full time

Job summary

Evans & Chambers Technology seeks a Tier 3 Threat Hunter / Detection Engineer in the National Capital Region (On Site) to proactively hunt threats and tune detection content, providing senior technical leadership for advanced investigations.

The role requires TS/SCI clearance, five to eight+ years in cybersecurity, and expertise in SIEM/SOAR content development, malware analysis, and forensics. You will collaborate with SOC and engineering teams in a 24/7 environment.

Qualifications

• Bachelor's degree in cybersecurity, CS, or related field.
• 5–8+ years in cybersecurity, including threat hunting, detection engineering, or advanced incident response.
• DoD 8570/8140 IAT Level III cert required, plus advanced cert such as GCTI, GCFA, OSCP, or CISSP.
• Proficiency in SIEM/SOAR content development and scripting/automation.
• TS/SCI clearance is required.

Responsibilities

• Conduct proactive, hypothesis-driven threat hunts informed by current cyber threat intelligence and adversary TTP frameworks.
• Develop, tune, and maintain SIEM and SOAR detection content and automated response playbooks.
• Lead technical investigation of advanced threats, including malware analysis and forensics beyond Tier 2 scope.
• Participate in design-time control mapping and threat modeling to guide architecture and platform decisions.

Skills

Threat hunting

Detection engineering

Incident response

Scripting/automation

Team mentorship

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Master's degree preferred

DoD 8570/8140 IAT Level III

GCTI

GCFA

OSCP

CISSP

Tools

SIEM/SOAR platforms

Threat intelligence platforms

Job description

Evans & Chambers Technology seeks a Tier 3 Threat Hunter / Detection Engineer in the National Capital Region (On Site) to proactively hunt threats and tune detection content, providing senior technical leadership for advanced investigations.

The role requires TS/SCI clearance, five to eight+ years in cybersecurity, and expertise in SIEM/SOAR content development, malware analysis, and forensics. You will collaborate with SOC and engineering teams in a 24/7 environment.