SOC Threat Hunter & CTI Analyst

SGL Manila (Shared Service Center), Inc.; Muntinlupa; On-site; PHP 600,000 - 900,000; Full time

Job summary

SGL Manila (Shared Service Center), Inc. is seeking a skilled Security Operations Center (SOC) Analyst to monitor, detect, and respond to cyber threats across the environment.

You will perform threat hunting, develop analytic rules, and analyze CTI to strengthen detection and response capabilities. Ideal candidates have 3–5 years of SOC experience, hands‑on use of Microsoft Sentinel, and experience with CTI platforms like Recorded Future.

Qualifications

• 3–5+ years in SOC operations, IR, threat hunting or CTI.
• Hands‑on with SIEM platforms (e.g., Microsoft Sentinel).
• Experience creating/tuning analytic rules, detections, and alerting.

Responsibilities

• Perform day‑to‑day monitoring, investigation, triage, containment, and handling of security incidents and alerts.
• Conduct proactive threat hunting to identify suspicious, anomalous, or malicious activity across the environment.
• Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms.
• Analyze CTI feeds, IoCs, emerging threats, and attacker behaviors to improve detection and response.
• Perform threat actor profiling, TTP analysis, and MITRE ATT&CK mapping.
• Manage IoC lifecycle: validation, enrichment, tracking, tuning, operationalization.
• Utilize CTI platforms (e.g., Recorded Future) for threat research and analysis.
• Investigate phishing, malware, endpoint, identity, cloud, and network incidents.
• Correlate logs/telemetry to identify attack patterns and gaps.
• Present findings and security recommendations to technical teams and management.
• Coordinate with internal teams during incident response and remediation.
• Continuously improve SOC processes, use cases, and detection coverage.

Skills

SOC operations

Incident response

Threat hunting

CTI concepts

SIEM (Microsoft Sentinel)

Analytic rule creation

Threat intelligence platforms

MITRE ATT&CK mapping

KQL / SPL

Communication skills

Education

Bachelor's degree in CS/IT

Tools

Microsoft Sentinel

Recorded Future

Job description

SGL Manila (Shared Service Center), Inc. is seeking a skilled Security Operations Center (SOC) Analyst to monitor, detect, and respond to cyber threats across the environment.

You will perform threat hunting, develop analytic rules, and analyze CTI to strengthen detection and response capabilities. Ideal candidates have 3–5 years of SOC experience, hands‑on use of Microsoft Sentinel, and experience with CTI platforms like Recorded Future.