SOC Threat Hunter & Incident Response Analyst

Scan Global Logistics; Muntinlupa; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Scan Global Logistics is seeking a skilled Security Operations Center (SOC) Analyst in the Philippines to monitor, detect, and respond to cyber threats. You will perform threat hunting, analyze CTI, and develop analytic rules to strengthen security postures across IT and OT environments.

The role requires hands-on experience with SIEM (Microsoft Sentinel), strong analytical skills, and the ability to present findings clearly to stakeholders.

Qualifications

• 3–5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel.
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Responsibilities

• Perform day-to-day monitoring, investigation, triage, containment, and handling of security incidents and alerts.
• Conduct proactive threat hunting activities to identify suspicious, anomalous, or malicious activities across the environment.
• Create, tune, and maintain analytic/detection rules within SIEM and security monitoring platforms.
• Analyze cyber threat intelligence feeds, indicators of compromise (IoCs), emerging threats, and attacker behaviors to improve detection and response capabilities.
• Perform threat actor profiling, TTP analysis, and mapping using frameworks such as MITRE ATT&CK.
• Manage IoC lifecycle activities including validation, enrichment, tracking, tuning, and operationalization.
• Utilize threat intelligence platforms such as Recorded Future or similar CTI solutions for threat research and analysis.
• Investigate phishing, malware, endpoint, identity, cloud, and network-related security incidents.
• Correlate logs, telemetry, and intelligence data to identify attack patterns and security gaps.
• Present findings, discuss risks, and provide security recommendations to technical teams, management, and stakeholders.
• Coordinate with internal teams during incident response and remediation activities.
• Continuously improve SOC processes, use cases, playbooks, and detection coverage.

Skills

SOC operations

Incident response

Threat hunting

Cyber threat intelligence

SIEM

Microsoft Sentinel

Analytic rules

Detections

Correlation logic

Alerting mechanisms

KQL

SPL

Communication

Tools

Microsoft Sentinel

Job description

Scan Global Logistics is seeking a skilled Security Operations Center (SOC) Analyst in the Philippines to monitor, detect, and respond to cyber threats. You will perform threat hunting, analyze CTI, and develop analytic rules to strengthen security postures across IT and OT environments.

The role requires hands-on experience with SIEM (Microsoft Sentinel), strong analytical skills, and the ability to present findings clearly to stakeholders.