Remote Cybersecurity Engineer — After-Hours Incident Response

Sourcefit; Quezon City; A distancia; PHP 700.000 - 1.200.000; Jornada completa

Descripción de la vacante

Sourcefit is seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response across customer environments. This fully remote role focuses on monitoring, investigation, and remediation of threats using EDR, with SentinelOne experience strongly preferred.

You will work night shifts from 8pm-7am EST, Sunday to Wednesday and Thursday to Sunday, with US holidays observed.

Formación

• 3+ years of cybersecurity, incident response, SOC, or MDR experience.
• Hands-on experience with EDR platforms, including SentinelOne (preferred).
• Experience with SIEM solutions such as Splunk, Microsoft Sentinel, or similar.
• Working knowledge of Windows Server, Active Directory, and Microsoft 365 environments.
• Experience with PowerShell or other automation tools is a plus.

Responsabilidades

• Monitor, investigate, and respond to security alerts and incidents.
• Perform threat hunting, containment, eradication, and recovery activities.
• Analyze suspicious activity, malware, ransomware, and endpoint threats.
• Manage and remediate alerts generated by EDR, MDR, and SIEM platforms.
• Conduct root cause analysis and document findings.
• Perform remote troubleshooting and remediation of cybersecurity-related issues.
• Escalate complex incidents when necessary and coordinate with internal teams.
• Maintain accurate incident documentation, remediation records, and security reports.
• Develop and maintain security procedures, runbooks, and operational documentation.
• Review customer environments and recommend security improvements.

Conocimientos

Incident response

Threat hunting

Security monitoring

EDR tooling

SOC operations

Documentation

Communication

Remote work

PowerShell

Herramientas

SentinelOne

DNSFilter

Microsoft Defender for Endpoint

Splunk

Microsoft Sentinel

PowerShell

Ticketing systems

Descripción del empleo

Sourcefit is seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response across customer environments. This fully remote role focuses on monitoring, investigation, and remediation of threats using EDR, with SentinelOne experience strongly preferred.

You will work night shifts from 8pm-7am EST, Sunday to Wednesday and Thursday to Sunday, with US holidays observed.