Director of Response

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Oversee Blackpanda's Cyber Incident Response operations in the Philippines.

• Expand and maintain the Philippines response team through recruitment, training, and resource development.

• Provide mentorship to consultants in DFIR techniques, client engagement, and operational standards.

• Take responsibility for the health, performance, and development of the local team.

• Collaborate with regional teams in Singapore, Hong Kong, Japan, and Malaysia to exchange intelligence and harmonize methodologies.

• Serve as a senior technical advisor during active incidents, directing containment, elimination, recovery, and post-incident strategies.

• Counsel executives on risk, regulatory concerns, and strategic alternatives.

• Facilitate scoping discussions and convert client requirements into response strategies and proposals.

• Foster relationships with clients, legal advisors, insurers, regulators, and law enforcement agencies.

• Ensure delivery quality across Philippine engagements and assess findings, reports, and outputs.

• Lead or coordinate on-site responses throughout Metro Manila, Cebu, Davao, and other business hubs in the Philippines.

• Direct investigations across Windows, Linux, macOS, and cloud platforms utilizing EDR, SIEM, network, and forensic data.

• Stay informed about regulatory requirements and threat landscapes in the Philippines and APAC region.

• Act as the local authority during regulatory discussions and notifications.

• Represent Blackpanda at conferences, industry gatherings, and roundtable discussions.

• Enhance personal and firm reputation through speaking engagements, publications, and thought leadership initiatives.

• Collaborate with sales and regional response leadership on pre-sales efforts and capability positioning.

⛳️ Requirements

• Over 8 years of hands-on experience in cyber incident response, digital forensics, or threat intelligence, with significant client-facing consulting experience.

• More than 3 years of experience in leading or managing a response, DFIR, or security consulting team, including responsibilities for hiring, mentoring, and performance management.

• Proven track record in managing complex, high-stakes incidents from start to finish, including ransomware, BEC, nation-state breaches, and data exposure cases.

• Experience in conducting tabletop exercises for both technical and non-technical audiences across various seniority levels.

• Strong technical knowledge of enterprise networks, endpoints, and cloud environments: Windows, Linux, macOS, AWS, Azure, and GCP.

• Proficient in EDR, SIEM, network forensics, and forensic tools including Splunk, ELK, SentinelOne, CrowdStrike, Velociraptor, and X-Ways.

• Capability to convey complex technical findings into clear strategic recommendations for boardrooms, regulators, and crisis management teams.

• Familiarity with the Philippine regulatory landscape, including NPC, BSP, SEC, and DICT/CICC.

• An informed perspective on the APAC threat environment.

• Proficient in English and Filipino, both written and spoken.

• Composed and decisive under pressure, demonstrating sound judgment in uncertain, high-stakes situations.

• Preferred: certifications such as GCFA, GNFA, GREM, GCIH, OSCP, or equivalent qualifications.

• Preferred: experience presenting at industry conferences and contributing to public thought leadership.

• Preferred: established connections within the Philippines' cyber, legal, regulatory, law enforcement, and insurance sectors.

• Preferred: fluency in Cebuano or another regional language alongside English and Filipino.

• Preferred: prior experience with OT/ICS or critical infrastructure settings.

🏝️ Benefits

• 40 days of paid leave annually, including public holidays.

• Limited Work From Anywhere policy: 5 days per quarter, contingent on teammate coverage and manager approval.

• Comprehensive corporate health plan offering medical and dental coverage through an extensive direct billing network.

• Opportunities for inter-office travel.

• Mandatory annual week-long Tribe Onsite meet-up.

• Quarterly week-long leadership Offsites.

• $5,000 USD/year professional training budget, subject to manager approval and a 12-month retention requirement.

• Competitive base salary with performance-based variable compensation linked to market outcomes.

• Equity participation in Blackpanda's growth.