SOC Analyst: Threat Hunting, CTI & Incident Response

Scan Global Logistics; Muntinlupa; On-site; PHP 446,000 - 781,000; Full time

Job summary

Scan Global Logistics is seeking a skilled Security Operations Center Analyst with CTI, threat hunting, and incident response to strengthen the organization’s security posture. You will monitor, investigate, triage, and respond to security alerts; develop rules in SIEM, analyze IoCs, and map threats using MITRE ATT&CK.

Collaboration with IT teams is required for effective containment and remediation. The role emphasizes proactive threat detection, threat intelligence analysis, and continuous SOC

Qualifications

• 3–5 years in SOC operations, incident response, threat hunting, or CTI.
• Hands-on with SIEM platforms (e.g., Microsoft Sentinel).
• Experience creating and tuning analytic rules and alerts.

Responsibilities

• Monitor, investigate, triage, contain, and respond to security incidents and alerts.
• Proactively hunt threats to identify suspicious activities across the environment.
• Create and tune analytic/detection rules within SIEM and monitoring platforms.
• Analyze threat intelligence feeds, IoCs, threats, and attacker behaviors.
• Perform TTP analysis and MITRE ATT&CK mapping.
• Manage IoC lifecycle: validation, enrichment, tracking, tuning.
• Use CTI platforms (e.g., Recorded Future) for threat research.
• Investigate phishing, malware, endpoint, identity, cloud, and network incidents.
• Correlate logs/telemetry to identify attack patterns and gaps.
• Present findings and security recommendations to stakeholders.
• Coordinate with internal teams during incident response.
• Improve SOC processes, use cases, and playbooks.

Skills

SOC operations

Threat hunting

Incident response

CTI

MITRE ATT&CK

Microsoft Sentinel

KQL

Analytical skills

Communication skills

Tools

Recorded Future

Microsoft Sentinel

SIEM platforms

Threat intel platforms

Job description

Scan Global Logistics is seeking a skilled Security Operations Center Analyst with CTI, threat hunting, and incident response to strengthen the organization’s security posture. You will monitor, investigate, triage, and respond to security alerts; develop rules in SIEM, analyze IoCs, and map threats using MITRE ATT&CK.

Collaboration with IT teams is required for effective containment and remediation. The role emphasizes proactive threat detection, threat intelligence analysis, and continuous SOC