Threat Hunter & Incident Response Engineer

First Focus; Muntinlupa; Hybrid; PHP 800,000 - 1,200,000; Full time

Benefits offered by this job

Hybrid work arrangements

HMO from Day 1 with dental cover

Uprise coaching access (psychologists)

25 paid leave days

Study days and certification support

Weekly technical training

Employee referral program

End of year celebrations

Hybrid offices in Ortigas Pasig and Al

MVP Award

Job summary

First Focus is hiring for a security professional to join our Manila-based Security team. You will hunt threats, remediate vulnerabilities, and lead incident investigations across multi-tenant client environments.

You’ll implement and optimize security platforms such as Microsoft 365 Defender, Sentinel, Huntress, and Cisco Umbrella while collaborating with experienced engineers. A strong focus on customer security and proactive improvements is essential.

Qualifications

• Security-focused experience within an MSP/IT outsourcing or offshoring environment.
• Hands-on cybersecurity delivery across multi-tenant environments including threat monitoring and incident response.
• Multiple years of experience with Essential 8 and NIST Cybersecurity Framework.
• Experience with Microsoft 365 Security: Defender, Purview, and Entra ID Protection.
• Knowledge of Azure Security: Microsoft Sentinel, Defender for Cloud, and Privileged Identity Management.

Responsibilities

• Hunt threats, remediate vulnerabilities, and make security breaches deeply inconvenient for attackers.
• Deliver security assessments and recommend proactive improvements across client environments.
• Take ownership of security escalations with a calm, methodical approach.
• Investigate security incidents, gather evidence, identify root causes, and help prevent repeats.

Skills

Threat hunting

Incident response

Vulnerability remediation

Security frameworks

Microsoft 365 Security

Azure Security

Analytical thinking

English communication

Calm under pressure

Client-focused security

Tools

Microsoft 365 Defender

Purview

Entra ID Protection

Microsoft Sentinel

Defender for Cloud

PIM

ThreatLocker

SentinelOne

Huntress

Avanan

Cisco Umbrella

Job description

First Focus is hiring for a security professional to join our Manila-based Security team. You will hunt threats, remediate vulnerabilities, and lead incident investigations across multi-tenant client environments.

You’ll implement and optimize security platforms such as Microsoft 365 Defender, Sentinel, Huntress, and Cisco Umbrella while collaborating with experienced engineers. A strong focus on customer security and proactive improvements is essential.