Incident Response Analyst

Nexus Recruitment Group; Taguig; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Nexus Recruitment Group in the Philippines is seeking an experienced Incident Response Analyst to join its cybersecurity team. The role focuses on detecting, containing, and analyzing security events to protect information systems.

The ideal candidate has 4–5 years in incident response or digital forensics, with cloud forensics (AWS/Azure/GCP) and familiarity with standard forensic tools. You will monitor incidents across on‑premises and cloud, lead containment and recovery efforts, and document

Qualifications

• 4–5 years of experience in incident response, security operations, or digital forensics.
• Solid background in cloud forensics (AWS, Azure, GCP preferred).
• Familiarity with industry-standard forensic and incident response tools.

Responsibilities

• Monitor and respond to security incidents across on-premises and cloud infrastructure.
• Perform digital forensics to investigate compromised systems and determine root cause.
• Lead containment, eradication, and recovery efforts following security incidents.
• Collaborate with internal teams and stakeholders to mitigate threats and improve response processes.
• Utilize threat intelligence, SIEMs, SOAR platforms, and forensic tools to support investigations.
• Maintain detailed documentation and incident reports.

Skills

Incident response

Digital forensics

Cloud forensics

Tools

SIEM

SOAR

Forensic tools

Job description

We are looking for an experienced Incident Response Analyst to join our cybersecurity team. This role focuses on detecting, containing, and analyzing security events to protect the confidentiality, integrity, and availability of information systems. The ideal candidate will have strong hands-on experience in incident response and digital forensics, particularly in cloud environments.

Key Responsibilities:

• Monitor and respond to security incidents across on-premises and cloud infrastructure.
• Perform digital forensics to investigate compromised systems and determine root cause.
• Lead containment, eradication, and recovery efforts following security incidents.
• Collaborate with internal teams and stakeholders to mitigate threats and improve response processes.
• Utilize threat intelligence, SIEMs, SOAR platforms, and forensic tools to support investigations.
• Maintain detailed documentation and incident reports.

Qualifications:

• Minimum of 4-5 years of relevant experience in incident response, security operations, or digital forensics.
• Solid background in cloud forensics (AWS, Azure, GCP preferred).
• Familiarity with industry-standard forensic and incident response tools.