SOC L2 Threat Hunter — Google SecOps & Automation

Accenture; Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive salary package

Performance bonus and 13th Month Pay

Day 1 HMO and Life Insurance coverage

Flexible working arrangements

Company-sponsored training, upskilling

Job summary

Accenture’s Cybersecurity team is seeking a SOC L2 Analyst to investigate advanced threats, hunt adversaries, and develop detections using Google SecOps, MITRE ATT&CK, and Python-based automation.

You will analyze endpoint, network, cloud telemetry and collaborate with incident response, detection engineering, and security operations to strengthen cyber defenses in a hybrid Cubao-based setup.

Qualifications

• 3–5+ years of experience in SOC Operations, Incident Response, Detection Engineering, or Threat Hunting.
• Hands‑on experience with Google SecOps (Chronicle).
• Proven experience conducting threat hunting activities using the MITRE ATT&CK Framework.
• Experience analyzing security logs, network traffic, threat intelligence, and security events.
• Proficiency in Python scripting for security automation and data analysis.
• Strong understanding of cyber adversary behaviors, attack techniques, and incident response processes.

Responsibilities

• Perform proactive threat hunting using the MITRE ATT&CK Framework to identify adversary tactics, techniques, and procedures (TTPs).
• Analyze endpoint, network, cloud, and security telemetry to detect suspicious activity and validate threats.
• Leverage Google SecOps (Chronicle) for investigations, threat hunting, detection tuning, and security analytics.
• Develop and optimize detection rules, use cases, and threat hunting methodologies.
• Create Python-based automation to improve investigations, threat intelligence enrichment, and SOC efficiency.
• Collaborate with incident response, detection engineering, and security operations teams to strengthen cyber defense capabilities.
• Maintain investigation findings, playbooks, and operational documentation.

Skills

SOC Operations

Incident Response

Threat Hunting

Python scripting

Education

Google Cloud Professional Cloud Security Engineer

MITRE ATT&CK Defender (MAD)

GIAC Certified Incident Handler (GCIH)

GIAC Certified Intrusion Analyst (GCIA)

GIAC Cyber Threat Intelligence (GCTI)

Tools

Google SecOps (Chronicle)

MITRE ATT&CK Framework

YARA-L

Job description

Accenture’s Cybersecurity team is seeking a SOC L2 Analyst to investigate advanced threats, hunt adversaries, and develop detections using Google SecOps, MITRE ATT&CK, and Python-based automation.

You will analyze endpoint, network, cloud telemetry and collaborate with incident response, detection engineering, and security operations to strengthen cyber defenses in a hybrid Cubao-based setup.