Remote Cyber Security Analyst - Incident Response & Triage

Sourcepass; Hinoba-an; On-site; PHP 300,000 - 420,000; Full time

Job summary

Sourcepass is seeking a Fully Remote Security Incident Response professional to monitor alerts and triage incidents. The role involves basic incident handling, vulnerability patching, and clear communication with clients.

You will escalate complex issues to senior staff and document actions in detail. The ideal candidate will have strong written and verbal communication, a solid understanding of Windows or mixed OS environments, and familiarity with SOC practices.

Qualifications

• Willingness to learn and improve core function skills and potential additional security role skills.
• Strong written and verbal communication skills, internal and client-facing.
• Basic understanding of SOC practices and incident response processes.
• Strong understanding of the Windows operating system (Linux/macOS a plus).
• Strong understanding of Windows ecosystem (Active Directory, Azure, Microsoft 365).
• Experience with ticketing/tracking systems.
• Basic networking protocols and topologies knowledge, plus network analysis.
• Basic malware analysis understanding.
• Analytical, problem-solving and critical thinking skills.
• Basic OS and network auditing understanding.
• Knowledge of scripting languages (PowerShell, batch) a plus.
• Security+ / CEH / GCIH certifications preferred (or equivalents).

Responsibilities

• Monitor alerts, reports, and metrics from multiple systems to triage.
• Perform minor response to non-serious incidents (malware, data leakage, account misuse).
• Patch discovered vulnerabilities or misconfigurations (automated or manual).
• Escalate serious or complex events to senior security staff.
• Explain event sources and resolutions to clients clearly.
• Document steps taken clearly.
• Follow documented procedures to drive resolution.
• Make recommendations for process and tool improvements.

Skills

Incident response

Communication skills

SOC processes

Windows OS

Networking basics

PowerShell scripting

Analytical thinking

Threat detection

Documentation

Tools

PowerShell

Job description

Sourcepass is seeking a Fully Remote Security Incident Response professional to monitor alerts and triage incidents. The role involves basic incident handling, vulnerability patching, and clear communication with clients.

You will escalate complex issues to senior staff and document actions in detail. The ideal candidate will have strong written and verbal communication, a solid understanding of Windows or mixed OS environments, and familiarity with SOC practices.