Remote Cyber Defense Leader & Incident Response

JustMarkets; Philippines; Remote; PHP 1,800,000 - 3,200,000; Full time

Benefits offered by this job

20 paid vacation days per year

10 paid sick leave days per year

Public holidays as per the company’s;

Medical budget

Opportunity to work remotely

Professional education budget

Language learning budget

Wellness budget

Job summary

JustMarkets in the Philippines is seeking a Cyber Defense Manager to lead and mature our security operations, owning threat detection, investigation, containment, and exposure reduction. You will guide the SOC, incident response, and runbooks, build the team, and drive continuous improvement of detection coverage and risk controls while reporting to security leadership.

Excellent communication to technical and executive audiences and hands-on experience with SIEM/EDR and cloud security are

Qualifications

• 10+ years of experience in Information Security.
• 3+ years in a security management or team lead role with direct people management experience.
• Hands-on experience managing SOC operations, leading incident command, and driving MTTD/MTTR improvement.
• Ability to design, validate, and maintain detection logic across SIEM, EDR, and cloud platforms, with a deep understanding of runbook development and false-positive reduction.
• Knowledge of top attack scenarios (ATO, credential theft, privilege escalation, data exfiltration) and ability to map detections to threat models like MITRE ATT&CK.
• Experience prioritizing vulnerabilities using CVSS and asset criticality to reduce exposure aging.
• Understanding of IAM, PAM, SSO, and identity-related attack vectors relevant to detection and response.
• English - Upper-Intermediate or higher.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Skills

Security management

Incident response

Detection engineering

Threat modeling

MITRE ATT&CK

Vulnerability prioritization

SIEM/SOAR

Cloud security

KPI reporting

English communication

Tools

Splunk

Microsoft Sentinel

Chronicle

Elastic

SOAR tooling

Job description

JustMarkets in the Philippines is seeking a Cyber Defense Manager to lead and mature our security operations, owning threat detection, investigation, containment, and exposure reduction. You will guide the SOC, incident response, and runbooks, build the team, and drive continuous improvement of detection coverage and risk controls while reporting to security leadership.

Excellent communication to technical and executive audiences and hands-on experience with SIEM/EDR and cloud security are