Cyber Security Incident Response
3 days ago
WTW
Negotiable
On-site - Taguig 3-5 Yrs Exp Diploma Full-time
Job DescriptionDescription
The Cyber Security Incident Response Principal Analyst will play a pivotal role within WTW's Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW's Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with more than 5 years of expertise in incident response and cybersecurity.
As a key player in WTW's Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams, including SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Insider Threat. You will also work beyond the technical domain, liaising with HR, Legal, Compliance, and other business units to ensure effective incident management and mitigation.
The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW's large global footprint, this role offers a fascinating range of work, and occasional global travel may be required.
The Role
Responsibilities
The Cyber Security Incident Response Principal Analyst will play a key role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team. Responsibilities of this role will include:
- Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution.
- Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW's organizational needs.
- Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams.
- Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact.
- Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents.
- Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program.
- Provide mentorship and guidance to junior analysts and conduct tabletop exercises to improve team preparedness.
- Stay informed about emerging threats, attack trends, and evolving threat actor tactics, techniques, and procedures (TTPs) to ensure proactive Defense.
- Ensure incident handling complies with relevant regulations and prepare detailed reports for regulatory or internal purposes.
- Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required.
- Assist in developing and fine-tuning automation scripts and workflows to enhance incident detection and response efficiency.
- Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes.
- Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates.
- Maintain up-to-date records of all incident handling activities in incident management systems, ensuring alignment with internal policies and audit requirements.
The Requirements
We are looking for a candidate for Cyber Security Incident Response who has the following:
- Minimum 5 years of experience in incident response, with a strong understanding of cybersecurity principles, frameworks, and tools.
- Proficient in forensic analysis, malware analysis, and network traffic analysis. Experience with SIEM tools, EDR platforms, and threat intelligence integration is essential.
- Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively.
- Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies.
- Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives.
- Industry certifications such as CISSP, GCIH, GCFA, or CISM are highly preferred.
- Experience with platforms like Sentinel, Splunk, Carbon Black, or similar technologies.
- A proactive and decisive mindset with the ability to operate under pressure.
- Strong analytical and problem-solving skills to make informed decisions in complex situations.
- Collaborative and adaptable, with a passion for mentoring and developing team members.
WTW is an Equal Opportunity Employer.
#J-18808-Ljbffr-
Cyber Security Incident Response
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeCyber Security Incident Response - Senior AnalystWTWNegotiableOn-site - Taguig 3-5 Yrs Exp Diploma Full-timeJob DescriptionDescriptionThe Cyber Security Incident Response Senior Analyst will play a critical role in WTW's Cyber Security Incident Response Team (CSIRT), supporting the response to security incidents and contributing to the improvement of WTW's...
-
Cyber Security Incident Response Lead
1 week ago
Taguig, National Capital Region, Philippines Willis Towers Watson Full time**Job Summary**We are seeking a highly experienced Cyber Security Incident Response Principal Analyst to play a pivotal role within our Global Information and Cyber Security Defence (ICSD) function. The successful candidate will lead the response to complex security incidents and drive initiatives to enhance our Cyber incident management capabilities.This...
-
Cyber Security Incident Response Lead
7 days ago
Taguig, National Capital Region, Philippines Willis Towers Watson Full time**Job Summary:**We are seeking a skilled Senior Cyber Security Incident Response Analyst to join our Cyber Security Incident Response Team at Willis Towers Watson. As a key member of this team, you will play a critical role in supporting the response to security incidents and contributing to the improvement of our incident management capabilities.This is a...
-
Cyber Security Incident Response Manager
3 days ago
Taguig, National Capital Region, Philippines JTI Full timeJob DescriptionThe Cyber SOC Incident Response Manager will be responsible for identifying the root cause of a cyber incident, determining the scope of a compromise, and providing practical advice to prevent and mitigate threats.Key Responsibilities:Support Tier 1 Incident Response Analysts during low and medium severity incidents.Escalate high severity...
-
Cyber Security Response Lead
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeCyber Security Response LeadAt WTW, we are seeking a highly experienced Cyber Security Response Lead to join our team. As a key player in our Cyber Defense strategy, you will lead the response to complex security incidents and drive initiatives to enhance our Cyber incident management capabilities.The successful candidate will have a strong understanding of...
-
Security Incident Response Specialist
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeSecurity Incident Response Specialist**Job Overview**We are looking for a seasoned Security Incident Response Specialist to join our team. As a key member of our Cyber Defense strategy, you will be responsible for managing and responding to security incidents within WTW's Cyber Security Incident Response Team.Assist in the development and refinement of...
-
Cyber SOC Incident Response Manager
3 days ago
Taguig, National Capital Region, Philippines JTI Full timeSearch by keyword and location and click "create alert" to receive your job alerts by email:Select how often (in days) to receive an alert:Job ID: 95648Country: PhilippinesCity: Taguig, National Capital RegionProfessional area: Information TechnologyContract type: PermanentProfessional level: ExperiencedLocation:Taguig, National Capital Region, 00, PH,...
-
Senior Cyber Security Analyst
7 days ago
Taguig, National Capital Region, Philippines Willis Towers Watson Full time**Requirements:**We are seeking a highly skilled Cyber Security Incident Response Analyst with a minimum of 3 years of experience in incident response, cybersecurity, and technical operations. The ideal candidate will have a strong understanding of cybersecurity principles, frameworks, and tools, as well as experience working with SIEM tools, EDR platforms,...
-
Information Security Incident Response Lead
3 days ago
Taguig, National Capital Region, Philippines JTI Full timeJob SummaryThe Cyber SOC Incident Response Manager will play a critical role in our organization's incident response capabilities. The successful candidate will have a strong understanding of information security principles and best practices.Key ResponsibilitiesSupport Tier 1 Incident Response Analysts during daily operations.Contribute to the creation,...
-
Cyber Security Threat Analyst
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeCyber Security Threat Analyst**Job Description**We are seeking a highly skilled Cyber Security Threat Analyst to join our team. As a key member of our Cyber Defense strategy, you will play a critical role in managing and responding to security incidents within WTW's Cyber Security Incident Response Team.Support the investigation of security incidents...
-
Incident Response Specialist
5 days ago
Taguig, National Capital Region, Philippines GCash Full timeCybersecurity Expert - Incident Response TeamWe are looking for an experienced Cybersecurity Expert to join our Incident Response team at GCash. As a key member of our security operations, you will be responsible for detecting, analyzing, and responding to potential security threats.Key Responsibilities:Security Monitoring: Continuously monitor network and...
-
Cyber Defense Engineer Position
6 hours ago
Taguig, National Capital Region, Philippines Cyber Crime Full timeWe are seeking a highly skilled Cyber Defense Engineer to join our team at Coins.ph. As a key member of our security operations center, you will play a pivotal role in ensuring the security of our organization's information assets.About the Role:The successful candidate will be responsible for spearheading the development and implementation of robust change...
-
Incident Response Team Lead
2 days ago
Taguig, National Capital Region, Philippines Amadeus Full timeThe Incident Response Team Lead at Amadeus is responsible for leading the incident response efforts in case of a security breach or other major incident. As an active member of the SOC (Security Operations Center), you will work closely with the Computer Security Incident Response Team (CSIRT) to provide First Response Service (FRS) and participate in...
-
IT Security Emergency Response Manager
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeIT Security Emergency Response Manager**Job Summary**We are seeking an experienced IT Security Emergency Response Manager to join our team. As a key member of our Cyber Defense strategy, you will be responsible for managing and responding to security incidents within WTW's Cyber Security Incident Response Team.Develop and refine incident response processes,...
-
Senior Cyber Security Analyst
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeSenior Cyber Security AnalystWTW is seeking a Senior Cyber Security Analyst to join our Cyber Defense team. As a key player in our Cyber Defense strategy, you will establish and refine incident response procedures, collaborate with diverse stakeholders across the organization, and engage closely with other Cyber-Defense teams.The successful candidate will...
-
Taguig, National Capital Region, Philippines Willis Towers Watson Full time**About the Role:**We are looking for an experienced Cyber Security Incident Response Analyst to join our team at Willis Towers Watson. This is a challenging and rewarding role that requires strong technical skills, excellent communication abilities, and the ability to investigate and manage security incidents effectively.The successful candidate will have a...
-
Taguig, National Capital Region, Philippines JTI Full timeAbout the RoleWe are seeking a highly skilled Cyber SOC Incident Response Manager to join our team. The ideal candidate will have a strong background in information security and incident response.Key ResponsibilitiesRespond to low and medium security incidents, assess, triage, categorize, prioritize, and track incidents.Derive immediate mitigation measures...
-
Incident Response Principal Analyst
1 week ago
Taguig, National Capital Region, Philippines Willis Towers Watson Full time**Incident Response Expertise**We require a highly skilled Cyber Security Incident Response Principal Analyst with a deep understanding of cybersecurity principles, frameworks, and tools. The ideal candidate will have at least 5 years of experience in incident response and be proficient in forensic analysis, malware analysis, and network traffic...
-
Cyber Security Specialist @ Coins.ph
10 hours ago
Taguig, National Capital Region, Philippines Cyber Crime Full timeAt Coins.ph, we are committed to providing secure and reliable services to our customers. We seek a highly skilled and experienced Cyber Defense Engineer to join our team. This pivotal role is instrumental in ensuring the security of our organization's information assets by leading and facilitating change management processes.The ideal candidate will have a...
-
Cyber Security Expert
3 days ago
Taguig, National Capital Region, Philippines WTW Full timeJob OverviewWe are seeking highly skilled professionals to join our Cyber Security team at WTW and provide expert services and trusted expertise across the organization.This exciting opportunity is for an experienced L2 Insider Threat Analyst to investigate escalated Insider Threat and Data Loss Prevention (DLP) cases.Key Responsibilities:Investigate...
