Threat Hunter & Incident Response Engineer (MSP)

First Focus IT; Pasig; Hybrid; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid work arrangements

HMO from Day 1 (one dependent + dental

Study days and paid certification

Paid 25 leave days

Technical training and development

Employee referral program

Job summary

First Focus in Manila is hiring for a Security Engineer to protect client environments in a fast-paced MSP setting. You’ll hunt threats, respond to incidents, and drive vulnerability remediation across multi-tenant clients.

You’ll work with leading tools like ThreatLocker, SentinelOne, Huntress, Avanan, and Cisco Umbrella while collaborating with experienced engineers to continuously improve security services.

Qualifications

• Experience delivering cybersecurity services across multi-tenant environments.
• Hands-on threat monitoring, incident response and vulnerability remediation.
• Familiarity with Essential 8 and NIST Cybersecurity Frameworks.
• Experience with Microsoft 365 Security including Defender, Purview, and Entra ID Protection.
• Knowledge of Azure Security including Defender for Cloud and Privileged Identity Management.

Responsibilities

• Hunt threats, remediate vulnerabilities, and make security breaches difficult for attackers.
• Deliver security assessments and recommend improvements across client environments.
• Own security escalations from Support with a calm, methodical approach.
• Investigate incidents, identify root causes, and prevent repeats.
• Configure, maintain and optimize platforms like ThreatLocker, SentinelOne, Huntress, Avanan, and Cisco Umbrella.

Skills

Threat hunting

Incident response

Vulnerability remediation

Azure Security

Microsoft 365 Security

English communication

Tools

ThreatLocker

SentinelOne

Huntress

Cisco Umbrella

Defender for Cloud

Purview

Entra ID Protection

Job description

First Focus in Manila is hiring for a Security Engineer to protect client environments in a fast-paced MSP setting. You’ll hunt threats, respond to incidents, and drive vulnerability remediation across multi-tenant clients.

You’ll work with leading tools like ThreatLocker, SentinelOne, Huntress, Avanan, and Cisco Umbrella while collaborating with experienced engineers to continuously improve security services.