Security Threat Analyst

Be #InGoodHands with Metrobank!

Here at Metrobank, we dont simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobanks strong heart for the community, you have the chance to give back and make worthwhile contributions to our nations economic and social development.

With Metrobank, a meaningful life is within your reach!

Position Title: Security Threat Analyst (SOC Manager)

Job Summary

• Leads and manages overall direction and operations of the Security Operation Center (SOC)

• Managing the teams hiring, training and evaluation of team members

• Creates processes, assess incident reports, develop and implement necessary crisis communication plans

• Provides update and report to the CTMD Head and CISO

Duties and Responsibilities

• Primarily responsible for 24x7 security event monitoring, incident management, and initial incident response

• Provides overall direction to the security monitoring team to achieve the teams goals and deliverables

• Provides technical guidance if needed

• Ensure compliance with SLA, process adherence, and process improvements to achieve operational objectives

• Collaborate with the rest of CTMD teams (threat hunting, incident response, and vulnerability management) to ensure proper monitoring and response to cyber security incidents

• Collaborate with the rest of ISD teams for security infrastructure improvements, identifying threat vectors, and developing use cases for security monitoring

• Communication of SOC value and posturing relationship with Computer Security Incident Emergency Response Team (CSIERT) and industry partners

• Responsible for the development, review, and documentation of SOC policies, standards, and procedures

• Ensure that the skills development of team members is continuous and aligned to their role

• Ensure that performance metrics for SOC, services, and tools are up to date

• Creation of reports, dashboards, and metrics for SOC operations and presentation to management

• Responsible for team and vendor management, overall use of resources, and initiation of corrective action to ensure effective and efficient SOC operations

• Assist ISD security architects in identifying appropriate security tools to be used for security incidents

• Oversees the implementation and integration of security tools in the network as well as ensuring that tool usage is maximized

• Ensure incident assessment, reporting, communication, escalation, and monitoring

• Mentor the SOC Team regarding risk management, information security controls, incident analysis, incident response, incident documentation, SIEM tuning and monitoring, and other operational tasks in support of technologies managed by the Security Operations

• Performs other information security-related duties and responsibilities as directed by the Head of the Cyber Threat Management Department