Cybersecurity Incident Response Lead (24/7 Shifts)

Metrobank; Metro Manila; Sur place; PHP 900 000 - 1 300 000; Plein temps

Résumé du poste

Metrobank is seeking a Cybersecurity Incident Response Specialist to lead investigations, containment, and remediation of security incidents across the bank's operations. The role requires hands-on SIEM operations, threat hunting support, and playbook development to continuously improve cybersecurity posture.

Experience in incident response, digital forensics, and malware analysis is essential, with a willingness to work a 24x7 shift. This position is based at Metrobank's Pasay City offices.

Qualifications

• 3–5 years of experience in Information Security, Incident Response, SOC Operations, Cybersecurity Operations, or related field.
• Hands-on experience in security monitoring, SIEM operations, security event investigation, threat detection, and log analysis.
• Strong knowledge of incident response, digital forensics, malware analysis, root cause analysis, network security, and host-based investigations.
• Familiarity with Windows and Unix/Linux operating systems, authentication technologies, network protocols, and enterprise infrastructure environments.
• Professional certifications such as CEH, CISSP, CISA, GSEC, CHFI, GCIH, GCFA, or equivalent are preferred.

Responsabilités

• Serve as the primary escalation point for SOC Analysts and conduct in-depth investigations through data correlation, threat analysis, and root cause analysis to determine incident scope, risk, and severity.
• Provide guidance and oversight on incident containment, remediation, recovery, and resolution activities.
• Review incident tickets and ensure investigations conducted by SOC Analysts are thorough, accurate, and properly documented.
• Leverage threat intelligence to identify affected systems, determine attack scope, and assess potential impact.
• Document security incidents from initial detection through final resolution and closure.
• Develop, maintain, and enhance incident response playbooks.
• Stay current on emerging cyber threats, vulnerabilities, attack techniques, and applicable regulatory requirements.
• Support Threat Hunting activities by providing insights and recommendations for developing new threat detection and analytics methods.
• Analyze malware, network traffic patterns, and other security events to identify threats and recommend appropriate actions.
• Generate and submit incident reports, metrics, and operational reports on a daily, weekly, and monthly basis.
• Review security monitoring metrics and identify trends, anomalies, and opportunities for improving detection and response capabilities.
• Work closely with the SOC Manager to strengthen security operations and address identified process or control gaps.
• Participate in the evaluation, implementation, troubleshooting, and optimization of security tools and technologies.
• Perform other cybersecurity incident response and SOC-related duties as assigned by the SOC Manager.

Connaissances

Incident response

Security monitoring

Threat analysis

Root cause analysis

Log analysis

Scripting

Communication

Stakeholder management

Formation

Bachelor's degree in information security, Computer Science, Computer Engineering, or a related field

Outils

SIEM

Threat hunting tools

Malware analysis tools

Description du poste

Metrobank is seeking a Cybersecurity Incident Response Specialist to lead investigations, containment, and remediation of security incidents across the bank's operations. The role requires hands-on SIEM operations, threat hunting support, and playbook development to continuously improve cybersecurity posture.

Experience in incident response, digital forensics, and malware analysis is essential, with a willingness to work a 24x7 shift. This position is based at Metrobank's Pasay City offices.