Cybersecurity Incident Response Manager

Smart Communications, Inc.; Makati; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Smart Communications, Inc. is seeking an experienced cybersecurity leader to head Incident Response, Investigation, and Threat Intelligence teams in its Manila-area operations.

You will oversee detection, containment and remediation efforts, while mentoring a growing team across incident handling disciplines. The role requires deep expertise in SOC operations, strong leadership, and the ability to coordinate cross-functional stakeholders to ensure rapid, effective incident management and

Qualifications

• At least 5-8+ years of progressive experience in cybersecurity with 2-3 years in a leadership/management role within a SOC or incident response team.
• Proven experience leading and mentoring security professionals.
• Demonstrated success in managing major security incidents from detection to resolution.

Responsibilities

• Manage the overall development, communication and implementation of strategies and programs for Cyber Security Incident Response, Incident Investigation, and Threat Intelligence and Hunting teams.
• Ensure the team monitors, analyzes, and responds to security alerts, providing a defense layer for the organization.
• Collaborate with stakeholders to ensure seamless security operations and effective incident management.

Skills

Leadership and team management

Mentoring security professionals

Incident response leadership

Security monitoring and alerting

Communication and collaboration

Decision-making under pressure

Continuous improvement

Tools

SIEM/EDR platforms

Security automation

Job description

• At least 5-8+ years of progressive experience in cybersecurity, with at least 2-3 years in a leadership/management role within a Security Operations Center (SOC) or incident response team.
• Proven experience leading and mentoring security professionals.
• Demonstrated success in managing major security incidents from detection to resolution.
• Experience with SIEMIDR platforms and security automation.
• Experience in developing and implementing security policies, procedures, and playbooks.

Job Brief

• Manage the overall development, communication and implementation of strategies and programs of Cyber Security Incident Response, Incident Investigation, and Threat Intelligence and Hunting teams.
• Responsible for ensuring that the team effectively monitors, analyzes, and responds to security alerts, providing an essential layer of defense for the organization.
• Will work closely with all stakeholders to ensure seamless security operations and effective incident management.

Key Responsibilities

• Incident Response: Oversee investigations and emergency response planning.
• Team Management: Recruit, train, and supervise security personnel.
• Technology Oversight: Manage surveillance systems, access controls, and cybersecurity tools.

Technical Skills

• Leadership and Team Management: Strong leadership skills with experience managing and mentoring a team of cybersecurity professionals.
• Ability to motivate and guide team members, ensuring that they perform effectively under pressure.
• Technical Expertise: In-depth knowledge of cybersecurity monitoring, alerting, and incident response processes. Familiarity with SOC/SIEM technologies and an understanding of how to leverage these tools effectively.
• Communication and Collaboration: Excellent communication skills, with the ability to engage and collaborate with both internal teams and external service providers. Ability to articulate complex technical concepts to non-technical stakeholders and senior management.
• Problem-Solving and Decision-Making: Strong problem-solving abilities, particularly in the context of monitoring and incident response. Ability to make critical decisions quickly and effectively in high-pressure situations.
• Continuous Improvement: Commitment to staying updated on the latest developments in cybersecurity monitoring and incident response.
• Ability to drive continuous improvement initiatives within the monitoring and alerting function