Senior Cybersecurity Incident Commander

Thrive; Mabalacat; On-site; PHP 900,000 - 1,600,000; Full time

Job summary

Thrive is expanding its cybersecurity capabilities and is seeking a highly capable Incident Commander to lead critical security incident operations across the organization. This role is essential for directing and coordinating all activities and resources involved in a security incident, ensuring alignment across Thrive teams and client stakeholders.

The Incident Commander will drive containment, eradication, recovery and client communications with authority, manage incident lifecycle,

Qualifications

• Proven incident response experience with leadership of cross-functional security teams.

Responsibilities

• Lead complex/high-priority cybersecurity incidents and direct incident lifecycle from scoping to post-incident review.
• Coordinate across all parties involved in security incidents and ensure synchronized actions.
• Set operational tempo, assign owners, and communicate timelines and blockers in real-time.
• Drive containment, eradication, and recovery while maintaining client communication and security posture.
• Lead post-incident reviews and develop lessons learned and playbook improvements.

Skills

Leadership

Incident response

Executive communication

MITRE ATT&CK familiarity

Security tooling

Tools

SIEM

EDR

Forensic platforms

Job description

Thrive is expanding its cybersecurity capabilities and is seeking a highly capable Incident Commander to lead critical security incident operations across the organization. This role is essential for directing and coordinating all activities and resources involved in a security incident, ensuring alignment across Thrive teams and client stakeholders.

The Incident Commander will drive containment, eradication, recovery and client communications with authority, manage incident lifecycle,