Remote Cyber Security Analyst: Incident Triage & Response

Sourcepass; Philippines; Remote; PHP 670,000 - 1,339,000; Full time

Job summary

Sourcepass is seeking a Cyber Security Analyst for a fully remote position focused on monitoring alerts, triage, and minor incident response for client environments. You will escalate complex events to senior staff and maintain clear documentation while explaining findings to clients.

The role emphasizes strong Windows OS knowledge, incident response fundamentals, and effective communication with both internal teams and clients in a remote, client-facing setting.

Qualifications

• Willingness to learn and improve both core function skills and potential additional security role skills
• Strong written and verbal communication skills, client-facing
• Basic understanding of SOC practices and processes
• Strong understanding of incident response practices and processes
• Strong understanding of the Windows operating system (Linux and Macintosh a plus)
• Strong understanding of the Windows ecosystem (Active Directory, Azure, Microsoft365)
• Experience with ticketing and tracking systems
• Basic knowledge of networking protocols and topologies, as well as network analysis
• Basic understanding of malware analysis
• Analytical, problem solving, critical thinking skills
• Basic understanding of OS and network auditing
• Knowledge of scripting languages (PowerShell, batch, etc.) a plus
• Security+, ECih, & GCIH certifications (or equivalents) all preferred

Responsibilities

• Monitor incoming alerts, reports, and metrics from a variety a systems to perform triage
• Perform minor response to non-serious, non-complex events (malware, data leakage, account misuse, etc.)
• Perform automated or manual patching of discovered vulnerabilities or misconfigurations.
• Escalate more serious or complex events to senior security team staff
• Clearly explain event sources and resolutions to clients
• Clearly document steps taken
• Follow documented procedures to drive resolution
• Make recommendations for improvements to processes and tools

Skills

Triage alerts

Incident response

Patch management

Client communication

Documentation

Process improvement

PowerShell scripting

Windows OS

AD/Azure/M365

Networking basics

Tools

Ticketing system

Job description

Sourcepass is seeking a Cyber Security Analyst for a fully remote position focused on monitoring alerts, triage, and minor incident response for client environments. You will escalate complex events to senior staff and maintain clear documentation while explaining findings to clients.

The role emphasizes strong Windows OS knowledge, incident response fundamentals, and effective communication with both internal teams and clients in a remote, client-facing setting.