Threat Hunter & Incident Response Specialist

First Focus Information Technology, Inc.; Metro Manila; Hybrid; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid work arrangements

HMO from Day 1

Paid study days

Job summary

First Focus Information Technology, Inc. in Manila is seeking a Security Technician to hunt threats, investigate incidents, and deliver proactive security improvements for multi-tenant client environments.

You will work with ThreatLocker, SentinelOne, Huntress, Avanan and Cisco Umbrella while collaborating with a mature Security team. The role emphasizes hands-on incident response, vulnerability remediation and strong analytical thinking, with a focus on keeping clients secure and reducing risk

Qualifications

• Security-focused experience within an MSP, IT outsourcing or offshoring environment.

Responsibilities

• Hunt threats, remediate vulnerabilities and make security breaches deeply inconvenient for attackers.
• Deliver security assessments and recommend proactive improvements across client environments.
• Take ownership of security escalations from our Support team with a calm, methodical and curious approach.
• Investigate security incidents, gather evidence, identify root causes, and help prevent repeat occurrences.
• Configure, maintain and optimise platforms including ThreatLocker, SentinelOne, Huntress, Avanan and Cisco Umbrella.
• Continuously identify opportunities to simplify, strengthen and improve our security services.

Skills

MSP cybersecurity experience

Threat monitoring

Incident response

Vulnerability remediation

Essential 8

NIST CSF

Microsoft 365 Security

Azure Security

English proficiency

Analytical thinking

Calm under pressure

Tools

ThreatLocker

SentinelOne

Huntress

Avanan

Cisco Umbrella

Microsoft Defender

Purview

Entra ID Protection

Microsoft Sentinel

Azure Security Center

Job description

First Focus Information Technology, Inc. in Manila is seeking a Security Technician to hunt threats, investigate incidents, and deliver proactive security improvements for multi-tenant client environments.

You will work with ThreatLocker, SentinelOne, Huntress, Avanan and Cisco Umbrella while collaborating with a mature Security team. The role emphasizes hands-on incident response, vulnerability remediation and strong analytical thinking, with a focus on keeping clients secure and reducing risk