Security Threat Hunter

Metrobank; Metro Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Metrobank is seeking a Security Threat Hunter to identify and analyze threats, develop detection analytics, and stay current on security trends. You will leverage threat intelligence to map attacks to systems and support incident response with deep knowledge of network, endpoints, and forensics.

The role follows regular hours with an on-call component, including after-hours and weekend coverage, and requires collaboration with the SOC and IR teams to implement countermeasures and improve hunting

Qualifications

• Bachelor's degree in information security, computer science or computer engineering.
• Excellent English communication (written and verbal) and presentation skills.
• Experience or involvement in threat intelligence communities.
• Willingness to work overtime and handle critical incidents escalated to CTMD Head.
• Ability to source, digest and act on threat intelligence feeds.

Responsibilities

• Research threat intelligence feeds to identify IOAs/IOCs and correlate with internal events.
• Proactively search for threats, analyze and report malicious activities and trends.
• Recognize intrusion attempts through event detail and summaries.
• Identify emerging threats, vulnerabilities, and risks.
• Recommend improvements to monitoring tools based on hunting findings.
• Collaborate with SOC and IR teams for feedback on new suspicious behavior.
• Develop actionable intelligence to drive countermeasure development.
• Develop, review and improve use cases, playbooks and vulnerability reporting.
• Coordinate with remediation teams on events and incident mitigation.

Skills

Threat hunting

English communication

Presentation skills

Education

Bachelor's Degree in Information Security / CS / CE

Tools

Data security analytics tools

Visualization tools

Ethical hacking tools

Job description

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!

The Security Threat Hunter hunts for threats and proactively develop, tune and implement threat detection analytics and keep current on the latest security landscape. Leverages threat intelligence to identify impacted systems and the scope of the attack. Assists in incident response activities; possesses in-depth knowledge in network, endpoint applications including malware, reverse engineering and forensics.

The role is regular working hours (6.30-16.00 and 1.30-23.00) depending on specific team schedule set) but has a required on-call component (covering out-of-work hours and weekends).

Key Responsibilities

• Researches threat intelligence feeds to identify indicator of attacks/compromise (IOAs/ IOCs) for correlation to internal events.
• Proactively search for threats to identify, analyze and report on any malicious or suspicious activities and trends that could be indicative of risk.
• Recognize potential, successful, and unsuccessful intrusion attempts/compromises through review and analysis of relevant event detail and summary information.
• Identify and characterize new emerging threats, vulnerabilities, and risks.
• Recommends how to optimize security monitoring tools based on threat hunting discoveries.
• Work closely with SOC and IR Team to get direct feedback about new, unknown suspicious behavior, and indicators.
• Develops actionable intelligence to drive countermeasure development
• Develop, review and recommend improvements on use cases, playbooks and vulnerability management reporting.
• Work with remediation (ITG) teams on events and incident mitigation
• Other task that may be assigned. by the CTMD Head

Qualifications

• A Bachelor's Degree in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering
• Familiar with using tools related to: data security analytics and visualization, ethical hacking
• Involvement in threat intelligence and cybersecurity communities.
• Skills in sourcing, digesting and acting on threat intelligence feeds
• Ethical hacking skills a big plus but not essential
• Willingness to work overtime and adjust to reasonable demands from management in case of critical incidents being escalated to CTHI for immediate handling
• Excellent English communication (both written and verbal) and presentation skills
• Task and deliverable management skills

Other Details:

Office Location: Metropark Technological Complex, Pasay City