Cyber Incident Training & Crisis Coordination Officer

REST Solution; Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

REST Solution in Manila is seeking a Cyber Incident Training Officer within its CERT to lead preparation, training, and continuous improvement of response to major cyber incidents. When there is an active incident with severity medium or higher, the role becomes Cyber Incident Secretary, maintaining logs, tracking action plans, and coordinating communications with stakeholders.

The ideal candidate has hands-on cybersecurity experience, strong written and verbal English, and the ability to work

Qualifications

• Operational cybersecurity experience (2+ years) near CERT, CSIRT, SOC, or incident response function.
• Good understanding of cyber-attacks and IT architectures.
• Flexible working hours during crises; extra hours compensated.
• Ability to analyze chaotic situations and communicate findings clearly.
• Proficient in incident management practices: maintaining crisis logs, tracking actions, documenting decisions.

Responsibilities

• Design and facilitate cyber crisis exercises (TTX) and simulations.
• Prepare regular situation updates and decision records.
• Maintain crisis logs, track actions, and ensure traceability.
• Disseminate information to stakeholders and ensure clear communications.
• Collaborate with CERT team and Cyber Defense Center projects.

Skills

Cybersecurity

Incident management

Crisis coordination

Training & facilitation

English proficiency

Job description

REST Solution in Manila is seeking a Cyber Incident Training Officer within its CERT to lead preparation, training, and continuous improvement of response to major cyber incidents. When there is an active incident with severity medium or higher, the role becomes Cyber Incident Secretary, maintaining logs, tracking action plans, and coordinating communications with stakeholders.

The ideal candidate has hands-on cybersecurity experience, strong written and verbal English, and the ability to work