Senior Cybersecurity Incident Response Lead

Metropolitan Bank & Trust Company; Metro Manila; Sur place; PHP 900 000 - 1 500 000; Plein temps

Résumé du poste

Metrobank is seeking a Cybersecurity Incident Response Specialist to lead investigations of escalated incidents and guide containment and remediation efforts. You will analyze malware and network activity, generate reports, and help improve the bank’s cyber defenses.

Ideal candidates bring 3–5 years of security operations experience, strong analytical and communication skills, and familiarity with SIEM and forensics tools.

Qualifications

• Bachelor’s degree in information security, CS, or ECE or related field.
• 3–5 years in information security, incident response or SOC operations.
• Hands-on in security monitoring, SIEM, threat detection, and log analysis.
• Knowledge of incident response, digital forensics, root cause analysis, and network security.
• Familiarity with Windows and Unix/Linux; strong communication and stakeholder skills.
• Certifications such as CEH, CISSP, CISA, GSEC, CHFI, GCIH, GCFA preferred.

Responsabilités

• Investigate and manage escalated security incidents; lead containment, eradication, recovery, and remediation.
• Analyze security data, identify threat patterns, and provide actionable recommendations.
• Produce incident reports, playbooks, metrics, and insights for continuous improvement.
• Coordinate with SOC Analysts and SOC Manager to strengthen operations and address gaps.
• Develop and maintain incident response playbooks; stay updated on emerging threats.

Connaissances

Analytical thinking

Investigation

Problem-solving

Communication

Stakeholder management

24x7 shift readiness

Formation

Bachelor's degree in information security, Computer Science, Computer Engineering, or related field

Outils

SIEM

Threat intelligence platforms

Digital forensics tools

Malware analysis tooling

Description du poste

Metrobank is seeking a Cybersecurity Incident Response Specialist to lead investigations of escalated incidents and guide containment and remediation efforts. You will analyze malware and network activity, generate reports, and help improve the bank’s cyber defenses.

Ideal candidates bring 3–5 years of security operations experience, strong analytical and communication skills, and familiarity with SIEM and forensics tools.