Incident Response Analyst

Smart Communications, Inc.; Makati; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Smart Communications, Inc. is seeking a Cyber Security Incident Response specialist to monitor, detect, and respond to security incidents from Makati. The role requires hands-on experience with incident response tools and a strong focus on meeting defined SLAs and SLOs.

You will coordinate containment actions and provide timely reports to management. The ideal candidate has 1–2 years in cybersecurity, education in IT/CS/Engineering, and practical experience with tools like ServiceNow, EAS, IPS,

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field.
• 1–2 years of experience in cybersecurity with a focus on incident response, including internships.
• Hands-on experience with incident response tools and technologies.

Responsibilities

• Cyber Security Incident Response: monitor, detect, and respond to security alerts within defined SLO. Incidents acknowledged per SLA.
• Perform alert triage and analysis including asset identification, reputational checks, and validation.
• Containment and eradication within the defined response SLO.
• Ensure resolution of incidents within defined SLOs and utilize IR toolsets (ServiceNow, EAS, IPS, WAF, NAC, Firewall).
• Prepare and submit Operational Performance reports and dashboards for management.

Skills

Incident response

Cybersecurity

SLA / SLO awareness

Education

Bachelor's degree in IT/CS/Engineering

Tools

ServiceNow

EAS

IPS

WAF

NAC

Firewall

Job description

Job Description:

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, or any related course/discipline.

Qualifications

1–2 years of experience in cybersecurity with a focus on incident response, including relevant internships. Hands-on experience with incident response tools and technologies

Duties and Responsibilities

Cyber Security Incident Response

• Actively monitor, detect, and respond to security alerts and incidents per defined SLA. Incidents are acknowledged and responded to within the agreed response SLO
• Perform alert triage and analysis including asset and custodian identification, reputational checking, and alert validation
• Perform containment and eradication within the agreed response SLO
• Ensures resolution of incidents within the defined SLOs Utilize IR toolsets such as ServiceNow, EAS, IPS, WAF, NAC, Firewall etc

Reports

• Timely submission of Operational Performance reports/dashboards/value reports for consumption of management

Functional Competencies

• Respond to cybersecurity incidents and perform containment as prescribed by available cyber security tools.
• Provide operational report and conduct turnover between shifts
• Track completion of containment action that need to stop movement of malware infection or malicious operations
• Ensure that Incident Response team is fully staffed
• Respond to cyber security incidents within SLO
• Contain cyber security incidents within SLO
• Evaluate cyber security incidents and escalate to leadership with sense of urgency
• Escalate cyber security incidents to investigation team and provide the triage report with evidences such as logs
• Timely notifications of cyber security incidents to all stake holder specially when cyber security incidents will lead to cyber crisis
• Risk and Issue management and escalation to immediate head (Supervisor and up)