Global Incident Response & Digital Forensics Expert

Check Point; Manila; On-site; PHP 2,400,000 - 4,200,000; Full time

Job summary

Check Point, Manila, is seeking an experienced Senior DFIR professional to join our global incident response team. You will lead end-to-end investigations, perform Windows forensics, and coordinate with customers and internal teams to contain, eradicate, and recover from security incidents.

We value strong analytical and communication skills, with a focus on defensible remediation and clear, customer-facing reporting. Weekend on-call rotations and travel may be required.

Qualifications

• 5+ years of cybersecurity experience.
• Minimum 2 years of hands-on DFIR/Incident Response experience investigating confirmed system or enterprise compromises.
• Experience conducting forensic investigations to determine initial access and root cause, persistence, attacker activity, scope and impact.
• Hands-on experience analyzing Windows artifacts, endpoint telemetry, event logs, authentication activity, and network evidence.

Responsibilities

• Lead end-to-end Incident Response and Digital Forensics investigations from scoping to containment, remediation, and reporting.
• Analyze compromised systems to determine initial access, root cause, attacker activity, persistence, and lateral movement.
• Reconstruct attacker activity from telemetry and identify indicators of compromise.
• Lead response efforts during complex, large-scale, global security incidents.
• Develop containment, eradication, recovery, and remediation recommendations.
• Produce detailed incident reports documenting attack vectors, findings, and recommended actions.
• Communicate findings to customer technical teams and senior stakeholders.
• Develop and improve incident response plans, playbooks, and tabletop exercises.
• Collaborate with global incident responders, forensic investigators, and customer teams.

Skills

Incident Response

Forensics Analysis

Windows Forensics

Communication Skills

Job description

Check Point, Manila, is seeking an experienced Senior DFIR professional to join our global incident response team. You will lead end-to-end investigations, perform Windows forensics, and coordinate with customers and internal teams to contain, eradicate, and recover from security incidents.

We value strong analytical and communication skills, with a focus on defensible remediation and clear, customer-facing reporting. Weekend on-call rotations and travel may be required.