Incident Response Analyst (Support Engineer)

Check Point Software; Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Check Point Software in the Philippines is seeking a seasoned technical support engineer to protect endpoints across Windows, macOS, and Linux. You’ll troubleshoot, perform deep-dive analysis, and resolve complex incidents while documenting steps for knowledge sharing.

Collaborating with Support, QA, R&D, and Product Management, you will drive rapid resolutions, identify recurring issues, and contribute to improvements. This role offers growth with a global leader in AI-driven security.

Qualifications

• 3+ years in technical support, endpoint administration or troubleshooting.
• Experience in incident response and forensic analysis.
• Ability to create clear incident reports describing compromise vectors and attacker methods.
• Strong OS troubleshooting across Windows/macOS/Linux with relevant tools.
• Familiarity with cloud platforms (Azure, AWS) and directory services.
• Understanding of threat prevention tools and SIEM integration.
• Knowledge of hardware components and MDM/UEM platforms.
• Experience with ServiceNow or Salesforce ticketing systems.
• Ability to manage multiple cases under tight deadlines.

Responsibilities

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system for knowledge sharing and trend analysis.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps.
• Proactively identify recurring problems and recommend product or process improvements to reduce break/fix volume.
• Collaborate with internal teams (Support, QA, R&D, Product Management) to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers, ensuring timely status updates and clear explanations of findings and solution.

Skills

Endpoint troubleshooting

Incident response

Forensic analysis

OS troubleshooting

Cloud platforms

SIEM integration

MDM/UEM knowledge

Ticketing systems

Communication skills

Multi-tasking

Education

Bachelor's degree in Computer Science / IT / Cybersecurity or related field

Tools

Wireshark

Windows debugging

Active Directory / EntraID

ServiceNow

Salesforce

PowerShell

Python

SQL

Job description

Why Join Us

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.

Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.

This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.

We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.

What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.

If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Key Responsibilities

• Troubleshoot and resolve endpoint installation, configuration, connectivity, and performance issues across Windows, macOS, and Linux environments.
• Perform deep-dive analysis using system logs, traces, and debug data to identify root causes.
• Document all reported issues, diagnostic steps, and resolutions in the ticketing system for knowledge sharing and trend analysis.
• Escalate unresolved or complex cases to Tier 3 Engineering or R&D teams with detailed findings and replication steps.
• Proactively identify recurring problems and recommend product or process improvements to reduce break/fix volume.
• Collaborate with internal teams (Support, QA, R&D, Product Management) to drive rapid resolution of high-impact incidents.
• Maintain high standards of communication with customers, ensuring timely status updates and clear explanations of findings and solution.

Qualifications

Required Qualifications

• 3+ years of experience in technical support , end point administration or troubleshooting
• Perform incident response and forensic analysis of compromised systems, identify and provide recommendations for remediation
• Formulate and direct incident response efforts, prioritize those response efforts, and create legible incident reports that describe the compromise vector, attacker methodologies and artifacts
• Strong knowledge of OS troubleshooting (Windows, macOS, Linux), including tools like Wireshark and Windows debugging.
• Familiarity with cloud platforms (Azure, AWS, Linux, macOS) and directory services (EntraID/Active Directory).
• Understanding of threat prevention tools and SIEM integration.
• Knowledge of hardware components (BIOS, EFI, hard drives) and MDM/UEM platforms.
• Experience with ServiceNow or Salesforce ticketing systems.
• Ability to manage multiple support cases under tight deadlines while maintaining attention to detail.

Preferred Skills

• Previous experience with Check Point Products.
• Experience with scripting and automation (PowerShell, Python, batch scripting).
• Experience with MDM tools such as Intune, JAMF, and WorkSpace One.
• Experience with forensic investigation and CIRT processes.
• API integration and web developer tools knowledge.
• SQL and database querying experience.
• Cybersecurity certifications such as Security+, CISSP, CEH are a plus.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

Soft Skills

• Strong teaching and communication abilities—able to translate technical jargon into clear language.
• Creative problem-solving and customer-focused mindset.
• Team-oriented with a collaborative approach.
• Humble and curious—willing to ask questions and learn.