24x7 Incident Response Security Engineer

Clark Development Corporation; Angeles; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

HMO; first-year dependent coverage

Free meals

Free shuttle services

Recreational facilities

Job summary

Swak BPO Corp. is seeking an Incident Response/Cybersecurity Engineer to monitor, investigate, contain, and respond to cybersecurity threats across our global environment.

You will work with Infrastructure, Cloud Operations, IAM, and Support Services to minimize risk and improve security posture. The ideal candidate is analytical, detail-oriented, and thrives in a fast-paced setting requiring quick decision-making and strong communication.

Qualifications

• Willingness to work a 24x7x365 rotational shift schedule including day, mid, night shifts, weekends, and holidays.
• CompTIA Security+ or equivalent certification is required.
• 2+ years of IT, Security Operations, Incident Response, or Help Desk experience.
• Experience managing incident queues using Ivanti, ServiceNow, Jira Service Management, or similar ITSM tools.
• Strong understanding of Windows OS, AD, Microsoft 365, and endpoint troubleshooting.
• Familiarity with endpoint protection, AV, EDR, and security monitoring tools.
• Solid networking knowledge (TCP/IP, DNS, DHCP, VPNs) and basic troubleshooting.
• Familiarity with cybersecurity frameworks, IR methodologies, and best practices.
• Ability to investigate, prioritize, document, and coordinate responses to multiple incidents.
• Strong analytical and troubleshooting skills with root-cause analysis.
• Experience documenting incident timelines, evidence, and remediation activities.

Responsibilities

• Monitor security monitoring platforms, endpoint protection tools, and incident management systems for threats and incidents.
• Investigate alerts to determine legitimacy, scope, impact, and required actions.
• Respond to incidents including malware, phishing, unauthorized access, and suspicious authentication events.
• Coordinate IR efforts with Infrastructure, Cloud Operations, IAM, Support Services, and stakeholders.
• Contain, eradicate, recover, and validate incidents with minimal business disruption.
• Collect, preserve, and document forensic evidence when needed.
• Conduct root-cause analysis and develop risk-reduction recommendations.
• Maintain incident timelines, documentation, and response activities in ticketing systems.
• Develop and maintain IR playbooks, SOPs, and knowledge base articles.
• Participate in security awareness, tabletop exercises, and DR testing.
• Track incident trends and provide leadership with metrics and recommendations.
• Support regulatory, audit, and compliance activities with documentation.

Skills

Incident Response

Cybersecurity

SIEM

EDR

Windows OS

Networking fundamentals

Documentation

Communication

Problem solving

Tools

Ivanti

ServiceNow

Jira Service Management

Microsoft Defender

Microsoft Entra ID

Microsoft 365 Security

SIEM platforms

Job description

Swak BPO Corp. is seeking an Incident Response/Cybersecurity Engineer to monitor, investigate, contain, and respond to cybersecurity threats across our global environment.

You will work with Infrastructure, Cloud Operations, IAM, and Support Services to minimize risk and improve security posture. The ideal candidate is analytical, detail-oriented, and thrives in a fast-paced setting requiring quick decision-making and strong communication.