Incident Response Analyst Support Engineer

Check Point Software; Manila; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Check Point Software Philippines seeks aTechnical Support Specialist to troubleshoot endpoint installation and connectivity across Windows, macOS, and Linux, and to perform in-depth analysis using logs and debugging data.

You will document resolutions in the ticketing system and escalate complex cases to Tier 3 Engineering. Collaboration with QA, R&D, and Product teams is essential in a fast-paced security environment.

Qualifications

• 3+ years in technical support, endpoint administration or troubleshooting.
• Incident response and forensic analysis of compromised systems and remediation recommendations.
• Formulate incident response plans and produce legible incident reports.

Responsibilities

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux.
• Perform deep-dive analysis using logs, traces, and debug data to identify root causes.
• Document issues, steps, and resolutions in the ticketing system for knowledge sharing.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D with detailed findings.
• Identify recurring problems and suggest product/process improvements to reduce break/fix volume.
• Collaborate with Support, QA, R&D, and Product Management to drive rapid resolution of high-impact incidents.
• Maintain clear communication with customers with timely status updates and explanations.

Skills

Incident response

Troubleshooting

Communication

Multi-platform support

Prioritization

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Wireshark

Windows debugging

ServiceNow

Salesforce

PowerShell

Python

MDM/UEM

Job description

Job Description:

Company Description

Why Join Us

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Job Description

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system for knowledge sharing and trend analysis.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps.
• Proactively identify recurring problems and recommend product or process improvements to reduce break/fix volume.
• Collaborate with internal teams (Support, QA, R&D, Product Management) to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers, ensuring timely status updates and clear explanations of findings and solution

Qualifications

Required Qualifications

• 3+ years of experience in technical support , end point administration or troubleshooting
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Strong knowledge of OS troubleshooting (Windows, macOS, Linux), including tools like Wireshark and Windows debugging.
• Familiarity with cloud platforms (Azure, AWS, Linux, macOS) and directory services (EntraID/Active Directory).
• Understanding of threat prevention tools and SIEM integration.
• Knowledge of hardware components (BIOS, EFI, hard drives) and MDM/UEM platforms.
• Experience with ServiceNow or Salesforce ticketing systems.
• Ability to manage multiple support cases under tight deadlines while maintaining attention to detail.

Preferred Skills

• Previous experience with Check Point Products.
• Experience with scripting and automation (PowerShell, Python, batch scripting).
• Experience with MDM tools such as Intune, JAMF, and WorkSpace One.
• Experience with forensic investigation and CIRT processes.
• API integration and web developer tools knowledge.
• SQL and database querying experience.
• Cybersecurity certifications such as Security+, CISSP, CEH are a plus.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

Soft Skills

• Strong teaching and communication abilities—able to translate technical jargon into clear language.
• Creative problem-solving and customer-focused mindset.
• Team-oriented with a collaborative approach.
• Humble and curious—willing to ask questions and learn.

• Referral Category: Entry-Level Position
• CP Department: TAC
• Office Location: Makati City Philippi, Philippines
• Career site Category: Security & Risk Management

Requirements: