Cybersecurity Incident Response Specialist

Angeles City, Pampanga, Philippines; Philippines; On-site; PHP 600,000 - 900,000; Full time

Benefits offered by this job

HMO provided

Free meals

Free shuttle service

Recreational facilities

Job summary

Swak BPO Corp. is seeking an Incident Response/Cybersecurity Engineer to monitor, investigate, contain, and respond to cybersecurity threats across a global environment.

This on-site role in Clark Freeport Zone requires a proactive, analytical thinker who excels in fast-paced settings and can communicate effectively with cross-functional teams. The ideal candidate will have 2+ years in IT/security operations, hands-on experience with EDR, SIEM, and ITSM tools, and hold a CompTIA Security+ or

Qualifications

• 2+ years of experience in IT, security operations, incident response or help desk environments.
• CompTIA Security+ or equivalent certification is required.
• Experience with ITSM platforms such as Ivanti, ServiceNow or Jira Service Management.
• Strong understanding of Windows OS, Active Directory and Microsoft 365.

Responsibilities

• Monitor security platforms, endpoints and incident systems for threats and incidents.
• Investigate alerts to determine legitimacy, scope, impact and response actions.
• Respond to incidents including malware, phishing and unauthorized access attempts.
• Coordinate incident response with Infrastructure, Cloud Ops, IAM and stakeholders.
• Contain, eradicate, recover and validate incidents with minimal business disruption.
• Collect, preserve and document forensic evidence when required.
• Conduct root cause analysis and suggest actions to reduce future risk.
• Maintain detailed incident docs, timelines and actions in ticketing systems.
• Develop and maintain incident response playbooks and SOPs.
• Participate in security awareness, tabletop exercises and DR testing.
• Track incident trends and provide reports to leadership.
• Support audits with evidence and documentation.

Skills

Security monitoring

Incident response

EDR

SIEM

Windows / AD

Microsoft 365

ITSM tools

Networking basics

Threat detection

Phishing investigations

Tools

Ivanti

ServiceNow

Jira Service Management

Microsoft Defender

Microsoft Entra ID

Microsoft 365 Security

Azure

AWS

SIEM

Job description

Swak BPO Corp. is seeking an Incident Response/Cybersecurity Engineer to monitor, investigate, contain, and respond to cybersecurity threats across a global environment.

This on-site role in Clark Freeport Zone requires a proactive, analytical thinker who excels in fast-paced settings and can communicate effectively with cross-functional teams. The ideal candidate will have 2+ years in IT/security operations, hands-on experience with EDR, SIEM, and ITSM tools, and hold a CompTIA Security+ or