Security Threat Analyst SOC Manager

Metrobank; Metro Manila; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Metrobank is seeking a SOC Manager / Security Threat Analyst to lead and oversee the Security Operations Center, guiding incident response, threat detection, and security monitoring to protect critical banking systems.

The role requires 8+ years in cybersecurity with strong people leadership, vendor and stakeholder management, and expertise in SIEM platforms. Bank-sector experience is preferred, with a focus on operational reporting and security tool optimization.

Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field.

Responsibilities

• Lead 24x7 security event monitoring, incident management, and initial incident response.
• Provide direction to security monitoring team to achieve goals and deliverables.
• Collaborate with CTMD teams to ensure proper monitoring and response to cyber security incidents.
• Develop, review, and document SOC policies, standards, and procedures.
• Mentor SOC team on risk management, security controls, incident analysis, and SIEM tuning.

Skills

Cybersecurity expertise

Security Operations

Incident Response

Threat Management

SIEM tuning

Team leadership

Vendor management

Education

Bachelor’s degree in information technology or cybersecurity

Tools

Splunk

QRadar

Microsoft Sentinel

Job description

Job Description:

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Be #InGoodHands with Metrobank!

SOC Manager / Security Threat Analyst

Leads and oversees the overall operations, strategy, and performance of the Security Operations Center (SOC), ensuring the effective monitoring, detection, analysis, and response to cybersecurity threats and incidents. Responsible for managing and developing the SOC team through recruitment, training, coaching, and performance evaluation. Establishes and enhances security processes, assesses incident reports, drives incident response and crisis communication activities, and provides regular updates, risk assessments, and recommendations to the CTMD Head and Chief Information Security Officer (CISO).

Key Responsibilities

• Primarily responsible for 24x7 security event monitoring, incident management, and initial incident response
• Provides overall direction to the security monitoring team to achieve the team's goals and deliverables
• Provides technical guidance if needed
• Ensure compliance with SLA, process adherence, and process improvements to achieve operational objectives
• Collaborate with the rest of CTMD teams (threat hunting, incident response, and vulnerability management) to ensure proper monitoring and response to cyber security incidents
• Collaborate with the rest of ISD teams for security infrastructure improvements, identifying threat vectors, and developing use cases for security monitoring
• Communication of SOC value and posturing relationship with Computer Security Incident Emergency Response Team (CSIERT) and industry partners
• Responsible for the development, review, and documentation of SOC policies, standards, and procedures
• Ensure that the skills development of team members is continuous and aligned to their role
• Ensure that performance metrics for SOC, services, and tools are up to date
• Creation of reports, dashboards, and metrics for SOC operations and presentation to management
• Responsible for team and vendor management, overall use of resources, and initiation of corrective action to ensure effective and efficient SOC operations
• Assist ISD security architects in identifying appropriate security tools to be used for security incidentsOversees the implementation and integration of security tools in the network as well as ensuring that tool usage is maximized
• Ensure incident assessment, reporting, communication, escalation, and monitoring
• Mentor the SOC Team regarding risk management, information security controls, incident analysis, incident response, incident documentation, SIEM tuning and monitoring, and other operational tasks in support of technologies managed by the Security Operations
• Performs other information security-related duties and responsibilities as directed by the Head of the Cyber Threat Management Department

Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity, or a related field.
• Minimum of 8 years of experience in Cybersecurity, Security Operations, Incident Response, or Threat Management.
• At least 3 years of people management experience, preferably leading a Security Operations Center (SOC).
• Strong experience in 24x7 Security Monitoring, Incident Response, Threat Detection, and Security Operations.
• Hands‑on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel) and security monitoring tools.
• Good understanding of cybersecurity frameworks, incident management, vulnerability management, and threat hunting.
• Experience in team leadership, vendor management, stakeholder management, and operational reporting.
• Strong analytical, problem‑solving, and communication skills.
• Experience in the banking or financial services industry is preferred.

Preferred Certifications:

• CISSP, CISM, GIAC, CRISC, CEH, or equivalent cybersecurity certifications.