Director of Response

Blackpanda

. Lead Blackpanda's Cyber Incident Response practice in the Philippines .

Posted 11/9/2026full-timeRemote • PhilippinesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cyber Incident Response and Digital Forensics, with a strong focus on team leadership, client engagement, and regulatory compliance. Proven ability to manage high-stakes incidents and translate technical findings into strategic guidance for diverse stakeholders.

Highest-signal resume keywords

Cyber Incident ResponseDigital ForensicsTeam LeadershipRegulatory ComplianceClient Engagement

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ManagementThreat IntelligenceRansomware ResponseNetwork ForensicsCloud SecurityWindows SecurityLinux SecurityMacOS SecurityTabletop ExercisesPerformance Ownership

Soft Skills

MentoringClient CommunicationDecisive PresenceJudgment Under PressureStrategic Guidance

Tools & Technologies

EDRSIEMSplunkELKSentinelOneCrowdStrikeVelociraptorX-WaysAWSAzure

Certifications & Qualifications

GCFAGNFAGREMGCIHOSCP

Industry Keywords

Philippine Regulatory EnvironmentNPCBSPSECDICT/CICCAPAC Threat LandscapeCybersecurityLegal ComplianceInsuranceLaw Enforcement

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformLinuxMacOSSplunk

About the role

Key responsibilities & impact

Lead Blackpanda's Cyber Incident Response practice in the Philippines
Grow and retain the Philippines response team through hiring, development, and bench building
Mentor consultants in DFIR tradecraft, client communication, and operational discipline
Own the well-being, performance, and progression of the local team
Partner with regional teams in Singapore, Hong Kong, Japan, and Malaysia to share intelligence and align methodology
Act as senior technical advisor during active incidents, guiding containment, eradication, recovery, and post-incident strategy
Advise executives on risk, regulatory exposure, and strategic options
Lead scoping conversations and translate client needs into response plans and proposals
Maintain relationships with clients, legal counsel, insurers, regulators, and law enforcement
Own delivery quality across Philippine engagements and review findings, reports, and deliverables
Lead selected complex, sensitive, or high-profile matters requiring senior judgment
Lead or coordinate on-site response across Metro Manila, Cebu, Davao, and other Philippine business centres
Guide investigations across Windows, Linux, macOS, and cloud environments using EDR, SIEM, network, and forensic data
Maintain awareness of Philippine and APAC regulatory requirements and threat landscapes
Act as local authority during regulatory conversations and notifications
Represent Blackpanda at conferences, industry events, and roundtables
Build personal and firm reputation through speaking, publishing, and thought leadership
Partner with sales and regional response leadership on pre-sales and capability positioning

Requirements

What you’ll need

8+ years of hands-on experience in cyber incident response, digital forensics, or threat intelligence, including substantial client-facing consulting experience
3+ years leading or managing a response, DFIR, or security consulting team, including hiring, mentoring, and performance ownership
Track record leading complex, high-stakes incidents end-to-end, including ransomware, BEC, nation-state intrusions, and data exposure
Experience facilitating tabletop exercises for technical and non-technical audiences of varied seniority
Strong technical foundations across enterprise networks, endpoints, and cloud environments: Windows, Linux, macOS, AWS, Azure, and GCP
Working fluency with EDR, SIEM, network forensics, and forensic suites such as Splunk, ELK, SentinelOne, CrowdStrike, Velociraptor, and X-Ways
Ability to translate complex technical findings into clear strategic guidance for boardrooms, regulators, and war rooms
Working knowledge of the Philippine regulatory environment, including NPC, BSP, SEC, and DICT/CICC
Informed view of the APAC threat landscape
Fluency in English and Filipino, written and spoken
Calm, decisive presence under pressure, with proven judgment in ambiguous, high-stakes situations
Preferred: certifications such as GCFA, GNFA, GREM, GCIH, OSCP, or equivalent
Preferred: experience presenting at industry conferences and contributing public thought leadership
Preferred: established network across the Philippines' cyber, legal, regulatory, law enforcement, and insurance communities
Preferred: Cebuano or another regional language in addition to English and Filipino
Preferred: prior exposure to OT/ICS or critical infrastructure environments

Benefits

Comp & perks

40 days paid leave per year inclusive of public holidays
Limited Work From Anywhere policy allotment: 5 days per quarter, subject to teammate coverage and manager approval
Comprehensive corporate health plan with medical and dental coverage through a large direct billing network
Inter-office travel opportunities
Required annual week-long Tribe Onsite meet-up
Quarterly week-long leadership Offsites
$5000 USD/year professional training budget, subject to manager approval and a 12-month retention requirement
Competitive base salary with performance-based variable compensation tied to market results
Equity participation in Blackpanda's growth