-
-
TYPE OF WORK
Full Time
-
-
SALARY
Php150,000/month
-
-
HOURS PER WEEK
40
-
-
DATE UPDATED
Dec 18, 2025
About AlphaRidge
AlphaRidge delivers managed cybersecurity, IT operations, and compliance-driven resilience for clients in sectors where security maturity and uptime are mission-critical. Our Security Operations Center combines proactive threat detection, response, and governance to deliver measurable resilience and audit readiness.
We are seeking an experienced Tier 3 Threat Hunter to join our SOC team. This position focuses on proactive detection, hypothesis-driven hunting, and continuous improvement of detection engineering capabilities.
Role
As a Tier 3 Threat Hunter, you will proactively search for malicious activity that evades traditional detection mechanisms. You will leverage telemetry, threat intelligence, and behavioral analytics to uncover stealthy threats and design new detections that enhance AlphaRidge’s detection posture.
Responsibilities
• Conduct proactive threat hunts across endpoint, network, identity, and cloud telemetry.
• Develop hypotheses and use adversarial simulation to validate detection coverage.
• Build and tune analytic rules and hunting queries to identify suspicious behavior.
• Investigate complex i
• Collaborate with the SOC architect to optimize automation and enrichment workflows.
• Mentor Tier 1 and Tier 2 analysts to elevate investigative rigor.
• Contribute to continuous improvement of SOC processes and maturity.
Qualifications
• 4–6 years of experience in threat hunting, DFIR, or SOC operations.
• Advanced understanding of attacker TTPs, persistence techniques, and evasion methods.
• Proficiency in log analysis, detection engineering, and SIEM content development.
• Excellent problem-solving skills and ability to translate technical findings into actionable intelligence.
Preferred Skills/Certifications
• Experience with leading SIEM and EDR platforms (e.g., Sentinel, Defender, CrowdStrike, Exabeam).
• Certifications such as SC-100, GCFA, or GCTI preferred.
• Familiarity with threat intelligence enrichment, IOC correlation, and purple-team collaboration.
• Scripting knowledge (PowerShell, Python) for automation and data parsing.
