Security Intelligence Specialist

GCash; Metro Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

GCash is seeking a seasoned Threat Intelligence professional to lead threat analysis and security intelligence operations within the Philippines’ fintech landscape.

You will develop strategy, produce intelligence reports, mentor junior analysts, and coordinate with external partners and law enforcement. A minimum of 5+ years in cybersecurity and strong MITRE ATT&CK knowledge are required.

Qualifications

• 5+ years in cybersecurity, with at least 2 years in threat intelligence or a similar function.
• Strong understanding of threat intelligence lifecycle, threat actor behavior, and intelligence analysis methodologies.
• Experience working with SOC, IR, and Risk teams in an enterprise environment.
• Excellent written and verbal communication skills, especially in creating intelligence reports and briefings.
• Industry certifications such as GCTI, CISSP, or similar are a plus.

Responsibilities

• Conduct in-depth threat analysis to identify risks, vulnerabilities, and threat actor activity relevant to GCash’s ecosystem.
• Oversee day-to-day Security Intelligence operations, ensuring timely collection, correlation, and dissemination of intelligence.
• Collaborate with the Head of Security Intelligence to develop and maintain threat intelligence strategy, playbooks, and intelligence requirements.
• Produce high-quality intelligence reports, threat briefings, and alerts tailored to both technical and executive audiences.
• Manage relationships with external threat intelligence vendors, communities, and law enforcement partners.
• Support proactive threat hunting and red/blue team exercises with relevant intelligence.
• Monitor the cyber threat landscape for emerging TTPs and align with MITRE ATT&CK and other frameworks.
• Assist in incident investigations by providing context, attribution, and threat actor profiling.
• Mentor junior analysts and help mature Security Intelligence processes, tools, and workflows.

Skills

Threat intelligence

Threat analysis

MITRE ATT&CK

SOC/IR experience

Communication skills

CISSP

Education

Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field

Tools

ThreatConnect

MISP

Recorded Future

Job description

Job Description:

Do you want to take the first step in making Filipinos’ lives better everyday? Here in GCash we want to stay at the forefront of the FinTech industry by creating innovative, meaningful, and convenient financial solutions for the nation! G ka ba? Join the G Nation today!

Key Responsibilities

• Conduct in-depth threat analysis to identify potential risks, vulnerabilities, and threat actor activity relevant to GCash’s ecosystem.


• Oversee day-to‑day Security Intelligence operations, ensuring timely collection, correlation, and dissemination of intelligence.


• Collaborate with the Head of Security Intelligence to develop and maintain threat intelligence strategy, playbooks, and intelligence requirements.


• Produce high-quality intelligence reports, threat briefings, and alerts tailored to both technical and executive audiences.


• Manage relationships with external threat intelligence vendors, communities, and law enforcement partners.


• Support proactive threat hunting and red/blue team exercises with relevant intelligence.


• Monitor the cyber threat landscape for emerging tactics, techniques, and procedures (TTPs), and ensure alignment with MITRE ATT&CK and other frameworks.


• Assist in incident investigations by providing context, attribution, and threat actor profiling.


• Mentor junior analysts and help mature Security Intelligence processes, tools, and workflows.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)


• 5+ years of experience in cybersecurity, with at least 2 years in threat intelligence or a similar function.


• Strong understanding of threat intelligence lifecycle, threat actor behavior, and intelligence analysis methodologies.


• Familiarity with tools like ThreatConnect, MISP, Recorded Future, or similar platforms.


• Experience working with SOC, IR, and Risk teams in an enterprise environment.


• Excellent written and verbal communication skills, especially in creating intelligence reports and briefings.


• Industry certifications such as GCTI, CISSP, or similar are a plus.

Preferred Skills

• Experience with dark web monitoring and OSINT techniques.


• Knowledge of scripting (e.g., Python) for automation and enrichment tasks.


• Familiarity with regulatory and compliance frameworks (e.g., NIST, ISO 27001, PCI-DSS).


• Exposure to financial services or fintech threat landscapes is highly advantageous.

What We Offer

Opportunity for career growth and development in the #1 FinTech company in the country Working with a dynamic and highly collaborative team who want to change the game A company that values their people with highly competitive and flexible compensation and benefits package

Requirements