Remote After-Hours Cybersecurity Incident Responder

Sourcefit Philippines, Inc.; Quezon City; Remote; PHP 700,000 - 1,000,000; Full time

Job summary

Sourcefit Philippines, Inc. is seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response across customer environments.

This fully remote role focuses on monitoring, investigating, and remediating threats using EDR platforms, with SentinelOne experience strongly preferred. Responsibilities include monitoring security alerts, threat containment, incident resolution, and documenting findings.

Qualifications

• 3+ years of cybersecurity, incident response, SOC, or MDR experience.
• Hands-on with EDR platforms, SentinelOne preferred.
• Experience with SIEM tools (Splunk, Microsoft Sentinel).
• Experience with Windows Server, Active Directory, and Microsoft 365.
• PowerShell or other automation tools is a plus.
• Experience working in ticketing and incident management systems.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Perform threat hunting, containment, eradication, and recovery activities.
• Analyze malware, ransomware, and endpoint threats.
• Manage alerts from EDR, MDR, and SIEM platforms.
• Conduct root cause analysis and document findings.
• Remote troubleshooting and remediation of cybersecurity issues.
• Escalate incidents and coordinate with internal teams.
• Maintain incident documentation and security reports.
• Develop runbooks and operational procedures.
• Review customer environments and recommend security improvements.

Skills

Incident Response

SOC/MDR

Threat Hunting

EDR (SentinelOne)

SIEM: Splunk

SIEM: Microsoft Sentinel

Windows Server

Active Directory

Microsoft 365

PowerShell

Documentation

Tools

SentinelOne

DNSFilter

Microsoft Defender for Endpoint

Splunk

Microsoft Sentinel

Job description

Sourcefit Philippines, Inc. is seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response across customer environments.

This fully remote role focuses on monitoring, investigating, and remediating threats using EDR platforms, with SentinelOne experience strongly preferred. Responsibilities include monitoring security alerts, threat containment, incident resolution, and documenting findings.