SOC L2 Analyst – Google SecOps & Threat Hunting

Accenture; Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary package

Performance bonus and 13th Month Pay

Day 1 HMO and Life Insurance coverage

Flexible working arrangements

Company-sponsored training, upskilling

Job summary

Accenture’s Cybersecurity team is seeking a SOC L2 Analyst to investigate advanced threats, hunt adversaries, and develop detections using Google SecOps, MITRE ATT&CK, and Python-based automation.

You will analyze endpoint, network, cloud telemetry and collaborate with incident response, detection engineering, and security operations to strengthen cyber defenses in a hybrid Cubao-based setup.

Qualifications

• 3–5+ years of experience in SOC Operations, Incident Response, Detection Engineering, or Threat Hunting.
• Hands‑on experience with Google SecOps (Chronicle).
• Proven experience conducting threat hunting activities using the MITRE ATT&CK Framework.
• Experience analyzing security logs, network traffic, threat intelligence, and security events.
• Proficiency in Python scripting for security automation and data analysis.
• Strong understanding of cyber adversary behaviors, attack techniques, and incident response processes.

Responsibilities

• Perform proactive threat hunting using the MITRE ATT&CK Framework to identify adversary tactics, techniques, and procedures (TTPs).
• Analyze endpoint, network, cloud, and security telemetry to detect suspicious activity and validate threats.
• Leverage Google SecOps (Chronicle) for investigations, threat hunting, detection tuning, and security analytics.
• Develop and optimize detection rules, use cases, and threat hunting methodologies.
• Create Python-based automation to improve investigations, threat intelligence enrichment, and SOC efficiency.
• Collaborate with incident response, detection engineering, and security operations teams to strengthen cyber defense capabilities.
• Maintain investigation findings, playbooks, and operational documentation.

Skills

SOC Operations

Incident Response

Threat Hunting

Python scripting

Education

Google Cloud Professional Cloud Security Engineer

MITRE ATT&CK Defender (MAD)

GIAC Certified Incident Handler (GCIH)

GIAC Certified Intrusion Analyst (GCIA)

GIAC Cyber Threat Intelligence (GCTI)

Tools

Google SecOps (Chronicle)

MITRE ATT&CK Framework

YARA-L

Job description

Detect Threats. Hunt Adversaries. Strengthen Cyber Defense.

Join Accenture’s Cybersecurity team as a SOC L2 Analyst specializing in Google SecOps, Threat Hunting, and Security Analytics. You will investigate advanced threats, conduct proactive threat hunts, and develop detections using Google SecOps, MITRE ATT&CK, and Python-based automation.

What You’ll Do

• Perform proactive threat hunting using the MITRE ATT&CK Framework to identify adversary tactics, techniques, and procedures (TTPs).
• Analyze endpoint, network, cloud, and security telemetry to detect suspicious activity and validate threats.
• Leverage Google SecOps (Chronicle) for investigations, threat hunting, detection tuning, and security analytics.
• Develop and optimize detection rules, use cases, and threat hunting methodologies.
• Create Python-based automation to improve investigations, threat intelligence enrichment, and SOC efficiency.
• Collaborate with incident response, detection engineering, and security operations teams to strengthen cyber defense capabilities.
• Maintain investigation findings, playbooks, and operational documentation.

What We’re Looking For

• 3–5+ years of experience in SOC Operations, Incident Response, Detection Engineering, or Threat Hunting.
• Strong analytical and investigative skills with the ability to identify complex attack patterns.
• Hands‑on experience with Google SecOps (Chronicle).
• Proven experience conducting threat hunting activities using the MITRE ATT&CK Framework.
• Experience analyzing security logs, network traffic, threat intelligence, and security events.
• Proficiency in Python scripting for security automation and data analysis.
• Strong understanding of cyber adversary behaviors, attack techniques, and incident response processes.

Preferred Qualifications

• Experience with Google SecOps, YARA-L, and detection engineering.
• Familiarity with threat intelligence platforms and IOC/TTP analysis.
• Relevant certifications or similar:
  • Google Cloud Professional Cloud Security Engineer
  • MITRE ATT&CK Defender (MAD)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Cyber Threat Intelligence (GCTI)

Work Setup

• Hybrid work arrangement
• Cubao office location
• Amenable to possible shifting schedules

Why Join Accenture?

At Accenture, you’ll work on impactful projects using emerging technologies while collaborating with some of the industry’s top cybersecurity professionals.

Benefits & Perks

• Competitive salary package
• Performance bonus and 13th Month Pay
• Day 1 HMO and Life Insurance coverage
• Flexible working arrangements*
• Company-sponsored training, upskilling, and certifications
• Expanded maternity and paternity benefits*
• Employee Stock Purchase Plan
• Inclusive and collaborative work culture

*Terms and conditions apply.

Be Part of an Inclusive Workplace

At Accenture, we celebrate diversity and are committed to creating an inclusive environment where everyone can thrive. We welcome applications from all qualified candidates and provide reasonable accommodations throughout the recruitment process.

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicablelaw.Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.