Security Operations Center L2 Specialist- Google SecOps & Threat Hunting

Accenture; Metro Manila; On-site; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Bonus + 13th Month Pay

HMO + Life Insurance

Flexible work arrangements

Training & Certifications

Maternity & Paternity benefits

Employee Stock Purchase Plan

Inclusive culture

Job summary

Accenture's Cybersecurity team seeks a SOC L2 Specialist focusing on Google SecOps, threat hunting, and security analytics. You will investigate advanced threats, hunt proactively, and build detections using Google SecOps, MITRE ATT&CK, and Python automation.

Responsibilities include proactive threat hunts, telemetry analysis across endpoints, networks, and cloud, and collaboration with IR and SOC teams to strengthen defenses. Knowledge of YARA-L and relevant certifications is preferred.

Qualifications

• 3–5+ years in SOC Operations, IR, detection engineering, or threat hunting
• Strong analytical and investigative skills
• Hands-on with Google SecOps (Chronicle)
• Threat hunting using MITRE ATT&CK
• Analysis of security logs, network traffic and events
• Python scripting for security automation
• Knowledge of adversary behaviors and IR processes
• Certs: Google Cloud PCC Engineer, MAD, GCIH, GCIA, or GCTI

Responsibilities

• Perform proactive threat hunting using MITRE ATT&CK to identify TTPs
• Analyze endpoint, network, cloud telemetry to detect and validate threats
• Leverage Google SecOps (Chronicle) for investigations and analytics
• Develop and tune detection rules, use cases, and hunting methodologies
• Create Python-based automation to improve investigations and enrichment
• Collaborate with IR, detection engineering and SOC teams
• Maintain investigation findings, playbooks, and documentation

Skills

SOC operations

Threat hunting

Security analytics

Python scripting

MITRE ATT&CK

Google SecOps (Chronicle)

Incident response

YARA-L

Tools

Chronicle

YARA-L

Job description

About the role

Join Accenture's Cybersecurity team as a SOC L2 Specialist specializing in Google SecOps, Threat Hunting, and Security Analytics. You will investigate advanced threats, conduct proactive threat hunts, and develop detections using Google SecOps, MITRE ATT&CK, and Python-based automation.

Key responsibilities

• Perform proactive threat hunting using the MITRE ATT&CK Framework to identify adversary tactics, techniques, and procedures (TTPs)

• Analyze endpoint, network, cloud, and security telemetry to detect suspicious activity and validate threats

• Leverage Google SecOps (Chronicle) for investigations, threat hunting, detection tuning, and security analytics

• Develop and optimize detection rules, use cases, and threat hunting methodologies

• Create Python-based automation to improve investigations, threat intelligence enrichment, and SOC efficiency

• Collaborate with incident response, detection engineering, and security operations teams to strengthen cyber defense capabilities

• Maintain investigation findings, playbooks, and operational documentation

About you

• 3–5+ years of experience in SOC Operations, Incident Response, Detection Engineering, or Threat Hunting

• Strong analytical and investigative skills with the ability to identify complex attack patterns

• Hands-on experience with Google SecOps (Chronicle)

• Proven experience conducting threat hunting activities using the MITRE ATT&CK Framework

• Experience analyzing security logs, network traffic, threat intelligence, and security events

• Proficiency in Python scripting for security automation and data analysis

• Strong understanding of cyber adversary behaviors, attack techniques, and incident response processes

• Experience with Google SecOps, YARA-L, and detection engineering

• Familiarity with threat intelligence platforms and IOC/TTP analysis

• Relevant certifications: Google Cloud Professional Cloud Security Engineer, MITRE ATT&CK Defender (MAD), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), or GIAC Cyber Threat Intelligence (GCTI)

Benefits

• Competitive salary package

• Performance bonus and 13th Month Pay

• Day 1 HMO and Life Insurance coverage

• Flexible working arrangements

• Company-sponsored training, upskilling, and certifications

• Expanded maternity and paternity benefits

• Employee Stock Purchase Plan

• Inclusive and collaborative work culture

About us

At Accenture, you'll work on impactful projects using emerging technologies while collaborating with some of the industry's top cybersecurity professionals. We celebrate diversity and are committed to creating an inclusive environment where everyone can thrive.