Security Analyst InfoSec

Kroll; Metro Manila; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

Kroll is seeking a Senior Threat Hunter to proactively identify advanced cyber threats within client networks and SOC environments. The role emphasizes hypothesis-driven investigations, threat intelligence, and automation collaboration to improve detection, response, and defenses across cloud and on-premises systems.

Applicants should have 5+ years in cybersecurity, hands-on incident response, and familiarity with tools such as CrowdStrike Falcon, Splunk, and Python scripting.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field; advanced certifications preferred.
• 5+ years in cybersecurity, with hands-on experience in SOC, incident response, and threat hunting.
• Proficiency in tools such as CrowdStrike Falcon, Splunk, Wireshark, YARA, and Python for scripting and automation.
• Strong analytical skills, knowledge of MITRE ATT&CK framework, and understanding of cloud/network security.

Responsibilities

• Develop and test hypotheses based on threat intelligence, anomalies, and attack patterns to proactively hunt for malicious activity.
• Analyze logs, network traffic, endpoints, and telemetry data using tools like SIEM, EDR, and custom scripts to correlate events and detect stealthy attacks.
• Document findings, create repeatable hunt playbooks, and collaborate with detection engineering to automate responses and improve defenses.
• Research emerging threats, malware, and TTPs (tactics, techniques, procedures); generate reports and recommend mitigations.
• Conduct threat hunting campaigns, assess vulnerabilities, and support incident response while optimizing hunting tools and processes.

Skills

Analytical skills

MITRE ATT&CK knowledge

Cloud security

Network security

Education

Bachelor's degree in Cybersecurity or related field

Advanced certifications preferred (GCTI/CTIA/OSCP)

Tools

CrowdStrike Falcon

Splunk

Wireshark

YARA

Python

Job description

Job Description:

A Threat Hunter proactively identifies advanced cyber threats within organizational networks that evade traditional detection tools. This role involves hypothesis-driven investigations to uncover hidden adversaries, mitigate risks, and enhance SOC capabilities.

Key Responsibilities

• Develop and test hypotheses based on threat intelligence, anomalies, and attack patterns to proactively hunt for malicious activity.
• Analyze logs, network traffic, endpoints, and telemetry data using tools like SIEM, EDR, and custom scripts to correlate events and detect stealthy attacks.
• Document findings, create repeatable hunt playbooks, and collaborate with detection engineering to automate responses and improve defenses.
• Research emerging threats, malware, and TTPs (tactics, techniques, procedures); generate reports and recommend mitigations.
• Conduct threat hunting campaigns, assess vulnerabilities, and support incident response while optimizing hunting tools and processes.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field; advanced certifications like GCTI, CTIA, or OSCP preferred.
• 5+ years in cybersecurity, with hands-on experience in SOC, incident response, and threat hunting.
• Proficiency in tools such as CrowdStrike Falcon, Splunk, Wireshark, YARA, and Python for scripting and automation.
• Strong analytical skills, knowledge of MITRE ATT&CK framework, and understanding of cloud/network security.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.