Security Threat Hunter

Metropolitan Bank & Trust Company; Metro Manila; Sur place; PHP 600 000 - 900 000; Plein temps

Résumé du poste

Metrobank seeks a Security Threat Hunter to research threat intelligence feeds, identify indicators of attacks, and proactively detect threats within Metrobank's networks in Metro Manila. You will analyze events, coordinate with SOC/IR teams, and help optimize monitoring tools through threat-hunting insights.

The role requires involvement in threat intelligence communities, strong communication skills, and the ability to work overtime during critical incidents. On-call responsibilities may apply.

Qualifications

• A Bachelor's Degree in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering
• Familiar with using tools related to: data security analytics and visualization, ethical hacking
• Involvement in threat intelligence and cybersecurity communities.
• Skills in sourcing, digesting and acting on threat intelligence feeds
• Ethical hacking skills a big plus but not essential
• Willingness to work overtime and adjust to reasonable demands from management in case of critical incidents being escalated to CTHI for immediate handling
• Excellent English communication (both written and verbal) and presentation skills
• Task and deliverable management skills

Responsabilités

• Researches threat intelligence feeds to identify indicator of attacks/compromise for correlation to internal events.
• Proactively search for threats to identify, analyze and report on any malicious or suspicious activities and trends that could be indicative of risk.
• Recognize potential, successful, and unsuccessful intrusion attempts through review and analysis of relevant event detail and summary information.
• Identify and characterize new emerging threats, vulnerabilities, and risks.
• Recommends how to optimize security monitoring tools based on threat hunting discoveries.
• Work closely with SOC and IR Team to get direct feedback about new, unknown suspicious behavior, and indicators.
• Develops actionable intelligence to drive countermeasure development
• Develop, review and recommend improvements on use cases, playbooks and vulnerability management reporting.
• Work with remediation (ITG) teams on events and incident mitigation
• Other task that may be assigned. by the CTMD Head

Connaissances

Threat hunting

Threat intelligence

Incident response collaboration

Communication skills

Security analytics

Formation

Bachelor's degree in Information Security / Computer Science / Computer Engineering

Outils

Data security analytics tools

Visualization tools

Ethical hacking tools

Description du poste

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!

The Security Threat Hunter hunts for threats and proactively develop, tune and implement threat detection analytics and keep current on the latest security landscape. Leverages threat intelligence to identify impacted systems and the scope of the attack. Assists in incident response activities; possesses in-depth knowledge in network, endpoint applications including malware, reverse engineering and forensics.

The role is regular working hours (6.30-16.00 and 1.30-23.00) depending on specific team schedule set) but has a required on-call component (covering out-of-work hours and weekends).

Key Responsibilities

• Researches threat intelligence feeds to identify indicator of attacks/compromise (IOAs/ IOCs) for correlation to internal events.
• Proactively search for threats to identify, analyze and report on any malicious or suspicious activities and trends that could be indicative of risk.
• Recognize potential, successful, and unsuccessful intrusion attempts/compromises through review and analysis of relevant event detail and summary information.
• Identify and characterize new emerging threats, vulnerabilities, and risks.
• Recommends how to optimize security monitoring tools based on threat hunting discoveries.
• Work closely with SOC and IR Team to get direct feedback about new, unknown suspicious behavior, and indicators.
• Develops actionable intelligence to drive countermeasure development
• Develop, review and recommend improvements on use cases, playbooks and vulnerability management reporting.
• Work with remediation (ITG) teams on events and incident mitigation
• Other task that may be assigned. by the CTMD Head

Qualifications

• A Bachelor's Degree in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering
• Familiar with using tools related to: data security analytics and visualization, ethical hacking
• Involvement in threat intelligence and cybersecurity communities.
• Skills in sourcing, digesting and acting on threat intelligence feeds
• Ethical hacking skills a big plus but not essential
• Willingness to work overtime and adjust to reasonable demands from management in case of critical incidents being escalated to CTHI for immediate handling
• Excellent English communication (both written and verbal) and presentation skills
• Task and deliverable management skills

Other Details:

Office Location: Metropark Technological Complex, Pasay City