SOC L2 Threat Hunter | Google SecOps & Analytics

Accenture; Manila; Hybrid; PHP 700,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary package

Performance bonus and 13th Month Pay

Day 1 HMO and Life Insurance coverage

Flexible working arrangements

Company-sponsored training, upskilling

Job summary

Accenture in Manila seeks a SOC L2 Analyst to join our Cybersecurity team, focusing on Google SecOps, threat hunting, and security analytics. You will investigate advanced threats, develop detections with MITRE ATT&CK and Python automation, and collaborate with IR and SOC teams to strengthen defenses.

Hybrid work arrangement with Cubao office, shifting schedules possible, and a focus on maintaining playbooks and robust documentation.

Qualifications

• 3–5+ years in SOC, IR, detection engineering or threat hunting.
• Hands-on with Google SecOps (Chronicle) and threat hunting using MITRE ATT&CK.
• Experience analysing security logs, network activity, and events.
• Proficient in Python scripting for security automation and data analysis.
• Strong analytical and investigative abilities with adversary behavior knowledge.

Responsibilities

• Perform proactive threat hunting to identify TTPs using MITRE ATT&CK.
• Analyse endpoint, network, cloud telemetry to detect and validate threats.
• Use Google SecOps (Chronicle) for investigations and security analytics.
• Develop and tune detection rules, use cases and hunting methodologies.
• Create Python automation to enhance investigations and SOC efficiency.
• Collaborate with IR, detection engineering and SOC teams to strengthen defenses.
• Maintain investigation findings, playbooks and operational docs.

Skills

Threat hunting

SOC operations

Incident response

Python scripting

Threat analytics

MITRE ATT&CK

Google SecOps

Tools

Google SecOps (Chronicle)

YARA-L

Threat intel platforms

Job description

Accenture in Manila seeks a SOC L2 Analyst to join our Cybersecurity team, focusing on Google SecOps, threat hunting, and security analytics. You will investigate advanced threats, develop detections with MITRE ATT&CK and Python automation, and collaborate with IR and SOC teams to strengthen defenses.

Hybrid work arrangement with Cubao office, shifting schedules possible, and a focus on maintaining playbooks and robust documentation.