Threat Hunter & Security Incident Specialist (Hybrid)

First Focus AU; Manila; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work arrangements

HMO from Day 1 with dependent coverage

Dental cover

Job summary

First Focus AU is seeking a security professional to join our Manila Security team. You will hunt threats, remediate vulnerabilities, and lead incident response across multi-client environments, using modern cybersecurity tools in a fast-paced MSP setting.

You’ll deliver security assessments, own escalations, investigate incidents, and help prevent repeats as part of a collaborative team that values continuous learning and practical security improvements.

Qualifications

• Experience delivering cybersecurity services across multi-tenant environments.
• Experience with Essential 8 and NIST Cybersecurity Framework.
• Excellent written and verbal English communication.

Responsibilities

• Hunt threats, remediate vulnerabilities, and make security breaches deeply inconvenient for attackers.
• Deliver security assessments and recommend proactive improvements across client environments.
• Take ownership of security escalations from our Support team with a calm, methodical and curious approach.
• Investigate security incidents, gather evidence, identify root causes, and help prevent repeat occurrences.
• Configure, maintain and optimise platforms including ThreatLocker, SentinelOne, Huntress, Avanan and Cisco Umbrella.
• Continuously identify opportunities to simplify, strengthen and improve our security services.

Skills

Threat hunting

Incident response

Vulnerability remediation

Threat monitoring

Security analysis

English communication

Tools

ThreatLocker

SentinelOne

Huntress

Avanan

Cisco Umbrella

Microsoft Defender

Microsoft Purview

Entra ID Protection

Azure Security

Microsoft Sentinel

Job description

First Focus AU is seeking a security professional to join our Manila Security team. You will hunt threats, remediate vulnerabilities, and lead incident response across multi-client environments, using modern cybersecurity tools in a fast-paced MSP setting.

You’ll deliver security assessments, own escalations, investigate incidents, and help prevent repeats as part of a collaborative team that values continuous learning and practical security improvements.