Incident Response Analyst

Smart Communications, Inc.; Makati; On-site; PHP 480,000 - 800,000; Full time

Job summary

Smart Communications, Inc. in Metro Manila is seeking an experienced Cyber Response Analyst to lead incident response activities and coordinate with internal and external teams.

The role requires strong Unix/Linux and Windows system administration, TCP/IP knowledge, and hands-on experience with security investigations and MITRE ATT&CK. You will mentor junior analysts and help improve detection capabilities.

Qualifications

• Educational background in IT or engineering related field (e.g., Computer Science, Computer Engineering, MIS, ECE).
• Experience administering Unix-like systems and Windows, with knowledge of services/daemons.
• Knowledge of TCP/IP concepts and ability to analyze packet captures.
• Experience with investigation tools such as Volatility and Wireshark.
• Experience with network and security controls (firewalls, IPS, NAC, anti-DDoS).
• Familiarity with MITRE ATT&CK framework and related adversary techniques.

Responsibilities

• Respond to incidents by coordinating with internal and external teams to contain incidents and update tickets.
• Advise and develop remediation plans.
• Work with security engineering to enhance detection and prevention capabilities.
• Produce incident reports.
• Produce post-incident analyses and dashboards.
• Monitor containment and eradication efforts.
• Stay updated on global security trends from social media and RSS feeds.
• Mentor/supervise cyber response analysts.
• Provide inputs to proactive hunting and security architecture teams.

Skills

Unix admin

Windows admin

Network analysis

Incident response

TCP/IP know-how

Packet capture

Education

IT or Engineering degree

Tools

Volatility

Wireshark

Job description

Job Description:

Education

Educational Background Graduate of IT, or Engineering related course: ex: Computer Science, Computer Engineering, Physics, Mathematics, MIS, ECE, etc.

Qualifications

• Experience in system administration of Unix like Operating Systems and/or Windows as well as system services or daemons.
• Knowledgeable of TCPI/IP concepts and ability to analyze packet captures.
• Experience with various investigation tools (Volatility, Wireshark, etc).
• Experience with various network and system security controls (Firewalls, IPS, NAC, AntiDDOS).
• Deep knowledge of tools, techniques, and procedures of adversary (MITRE Framework, etc).

Duties and Responsibilities

• Respond to incidents by coordinating with internal and external departments to contain an incident. Timely update incident tickets and elevate accordingly.
• Advise and develop remediation plans.
• Work closely with the security engineering team to enhance detection and/or prevention capabilities.
• Produce incident reports.
• Produce post incident analysis, statistical information and dash boards.
• Monitor and Update containment and eradication efforts.
• Keep abreast with global security trends from social media and RSS feeds.
• Mentor/Supervise Cyber Response Analyst/s
• Ensure proper skills and capability are present among Cyber Response team.
• Provide inputs to proactive hunting team on areas that need further monitoring and surveillance.
• Provide inputs to Security Engineering and Architecture teams for additional visibility and prevention configurations.
• Other tasks that may be assigned from time to time.

Requirements: