Incident Response Analyst

Smart Communications, Inc.; Makati; On-site; PHP 300,000 - 540,000; Full time

Job summary

Smart Communications, Inc. is seeking a cybersecurity professional focused on incident response to monitor, detect, and respond to security incidents. The role emphasizes rapid containment, analysis, and escalation using IR toolsets such as ServiceNow, EAS, IPS, and WAF.

You will contribute to incident reports and performance dashboards for management. The ideal candidate has 1–2 years in cybersecurity incident response and hands-on experience with security tools, working to preserve system

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field.
• 1–2 years of experience in cybersecurity with a focus on incident response.
• Hands-on experience with incident response tools and technologies.

Responsibilities

• Actively monitor, detect, and respond to security alerts and incidents per defined SLA.
• Incidents are acknowledged and responded to within the agreed response SLO.
• Perform alert triage and analysis including asset and custodian identification, reputational checking, and alert validation.
• Perform containment and eradication within the agreed response SLO.
• Ensure resolution of incidents within the defined SLOs.
• Utilize IR toolsets such as ServiceNow, EAS, IPS, WAF, NAC, Firewall etc.
• Timely submission of Operational Performance reports/dashboards/value reports for management.

Skills

Incident response

Security monitoring

Tool proficiency

Education

Bachelor's degree (IT / CS / Engineering)

Tools

ServiceNow

EAS

IPS

WAF

NAC

Firewall

Job description

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, or any related course/discipline.

Education

Bachelor’s degree in Information Technology, Computer Science, Engineering, or any related course/discipline.

Qualifications

1–2 years of experience in cybersecurity with a focus on incident response, including relevant internships. Hands‑on experience with incident response tools and technologies

Duties And Responsibilities

Cyber Security Incident Response

• Actively monitor, detect, and respond to security alerts and incidents per defined SLA.
• Incidents are acknowledged and responded to within the agreed response SLO
• Perform alert triage and analysis including asset and custodian identification, reputational checking, and alert validation
• Perform containment and eradication within the agreed response SLO
• Ensures resolution of incidents within the defined SLOs
• Utilize IR toolsets such as ServiceNow, EAS, IPS, WAF, NAC, Firewall etc

Reports

• Timely submission of Operational Performance reports/dashboards/value reports for consumption of management

Functional Competencies

• Respond to cybersecurity incidents and perform containment as prescribed by available cyber security tools.
• Provide operational report and conduct turnover between shifts
• Track completion of containment action that need to stop movement of malware infection or malicious operations
• Ensure that Incident Response team is fully staffed
• Respond to cyber security incidents within SLO
• Contain cyber security incidents within SLO
• Evaluate cyber security incidents and amplify to leadership with sense of urgency
• Escalate cyber security incidents to investigation team and provide the triage report with evidences such as logs
• Timely notifications of cyber security incidents to all stake holder specially when cyber security incidents will lead to cyber crisis
• Risk and Issue management and escalation to immediate head (Supervisor and up)