Global Incident Response & Forensics Lead

Check Point Software; Metro Manila; Presencial; PHP 1.800.000 - 3.200.000; Jornada completa

Descripción de la vacante

Check Point is seeking a senior DFIR professional to lead end-to-end incident response and forensic investigations for enterprise clients in a global capacity. You will analyze Windows artifacts, network telemetry, and attacker TTPs to determine root cause and scope, while guiding containment and remediation efforts with customer teams.

Applicants should have 7+ years in cybersecurity with hands-on IR/DFIR experience, strong communication, and the ability to work across geographies, including

Formación

• 7+ years in cybersecurity.
• Minimum 4 years of hands-on DFIR/Incident Response.
• Experience conducting forensic investigations to determine initial access, root cause, persistence, and impact.
• Experience analyzing Windows artifacts, endpoint telemetry, logs, and network evidence.
• Experience handling ransomware, identity compromise, malware infections, and intrusions.
• Ability to scope and drive investigations and provide remediation recommendations.
• Strong skills in producing customer-facing incident reports and communicating findings.

Responsabilidades

• Lead end-to-end Incident Response and Digital Forensics investigations from scoping to containment and reporting.
• Perform forensic analysis of compromised systems to identify initial access, root cause, and attacker activity.
• Analyze telemetry to reconstruct attacker activity and identify indicators of compromise.
• Lead response efforts during complex, global security incidents.
• Develop containment, eradication, and remediation plans and reports.
• Produce detailed incident investigation reports with findings and actions.
• Communicate status to customer teams and senior stakeholders.
• Develop and improve incident response plans and playbooks.
• Design cyberattack scenarios and facilitate tabletop exercises.
• Build and maintain forensic/malware-analysis labs and collaborate with global teams.

Conocimientos

DFIR

Incident Response

Forensics

Windows Forensics

Malware Analysis

Threat Hunting

Educación

Herramientas

EnCase

Volatility

FTK

Descripción del empleo

Check Point is seeking a senior DFIR professional to lead end-to-end incident response and forensic investigations for enterprise clients in a global capacity. You will analyze Windows artifacts, network telemetry, and attacker TTPs to determine root cause and scope, while guiding containment and remediation efforts with customer teams.

Applicants should have 7+ years in cybersecurity with hands-on IR/DFIR experience, strong communication, and the ability to work across geographies, including