Incident Response Analyst (Support Engineer)

Check Point Software Technologies; Manila; On-site; PHP 350,000 - 520,000; Full time

Job summary

Check Point is seeking an Incident Response Analyst (Support Engineer) to join our security operations team in Makati City, Philippines. You will troubleshoot endpoint issues across Windows, macOS, and Linux, perform in-depth forensic analysis, and document findings for knowledge sharing.

You will work with Support, QA, R&D, and Product Management to rapidly resolve high-impact incidents and improve processes.

Qualifications

• 3+ years in technical support or endpoint troubleshooting
• Experience in incident response and forensic analysis
• Formulate and direct incident response efforts with clear reports
• Strong OS troubleshooting (Windows, macOS, Linux)
• Familiarity with Azure/AWS and directory services
• Understanding of threat prevention tools and SIEM
• Knowledge of hardware components and MDM/UEM
• Experience with ticketing systems (ServiceNow/Salesforce)
• Ability to manage multiple cases under deadlines

Responsibilities

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux
• Perform deep-dive analysis using system logs and debug data to identify root causes
• Document issues, steps, and resolutions in the ticketing system
• Escalate complex cases to Tier 3 Eng/R&D with findings and replication steps
• Identify recurring problems and recommend product/process improvements
• Collaborate with Support, QA, R&D, Product Management to drive rapid resolution
• Maintain clear customer communication with timely updates and explanations

Skills

Technical support

Endpoint administration

Troubleshooting

Incident response

Forensic analysis

Windows troubleshooting

macOS troubleshooting

Linux troubleshooting

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Wireshark

Windows debugging

ServiceNow

Salesforce

SIEM

Job description

Incident Response Analyst (Support Engineer)

• Full-time
• Referral Category: Entry-Level Position
• Office Location: Makati City Philippi, Philippines
• Career site Category: Security & Risk Management

Why Join Us

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system for knowledge sharing and trend analysis.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps.
• Proactively identify recurring problems and recommend product or process improvements to reduce break/fix volume.
• Collaborate with internal teams (Support, QA, R&D, Product Management) to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers, ensuring timely status updates and clear explanations of findings and solution

Required Qualifications

• 3+ years of experience in technical support , end point administration or troubleshooting
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Strong knowledge of OS troubleshooting (Windows, macOS, Linux), including tools like Wireshark and Windows debugging.
• Familiarity with cloud platforms (Azure, AWS, Linux, macOS) and directory services (EntraID/Active Directory).
• Understanding of threat prevention tools and SIEM integration.
• Knowledge of hardware components (BIOS, EFI, hard drives) and MDM/UEM platforms.
• Experience with ServiceNow or Salesforce ticketing systems.
• Ability to manage multiple support cases under tight deadlines while maintaining attention to detail.

Preferred Skills

• Previous experience with Check Point Products.
• Experience with scripting and automation (PowerShell, Python, batch scripting).
• Experience with MDM tools such as Intune, JAMF, and WorkSpace One.
• Experience with forensic investigation and CIRT processes.
• API integration and web developer tools knowledge.
• SQL and database querying experience.
• Cybersecurity certifications such as Security+, CISSP, CEH are a plus.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

Soft Skills

• Strong teaching and communication abilities—able to translate technical jargon into clear language.
• Creative problem-solving and customer-focused mindset.
• Team-oriented with a collaborative approach.
• Humble and curious—willing to ask questions and learn.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply