Cyber Incident Command Lead

Thrive; Tarlac City; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Thrive is expanding its cybersecurity capabilities and seeks a highly capable Incident Commander to lead critical security incident operations across our organization. You will direct and coordinate all activities and resources involved in a security incident, ensuring alignment across internal Thrive teams and with client stakeholders.

This role demands technical fluency, executive presence, and the ability to guide multi-team efforts under pressure while maintaining clear communication with

Qualifications

• Proven incident response leadership with cross-functional teams.
• Strong understanding of attack lifecycle, investigations, containment, and recovery.
• Experience briefing clients and executives on risk and remediation.
• Familiarity with security tools and incident response methodologies.

Responsibilities

• Lead and coordinate high-priority cybersecurity incidents from scoping to post-incident review.
• Act as central point across internal Thrive teams and client stakeholders.
• Direct containment, eradication, and recovery efforts while maintaining communications.

Skills

Incident response leadership

Cross-functional teamwork

MITRE ATT&CK knowledge

Communication with clients

Decision-making under pressure

Education

Bachelor's degree in Computer Science or Information Security

Tools

SIEM

EDR

Forensic platforms

Backup and disaster recovery

Job description

Thrive is expanding its cybersecurity capabilities and seeks a highly capable Incident Commander to lead critical security incident operations across our organization. You will direct and coordinate all activities and resources involved in a security incident, ensuring alignment across internal Thrive teams and with client stakeholders.

This role demands technical fluency, executive presence, and the ability to guide multi-team efforts under pressure while maintaining clear communication with