Remote DFIR Lead & Senior SOC Analyst

THEOS; Manila; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Theos is a cybersecurity company delivering premium services across Asia and beyond. We seek a DFIR Specialist / Senior SOC Analyst to lead client-facing engagements across the full incident response lifecycle, guiding organisations through complex investigations and remediation.

You will conduct forensic analysis across cloud and on-premises environments and work with senior stakeholders to provide clear, actionable remediation plans enabling stronger client resilience.

Qualifications

• Bachelor's degree or equivalent in information security, CS, digital forensics or related field.
• Experience administering or investigating cloud platforms (Azure, AWS, Google Workspace, or Alibaba Cloud).
• Minimum four years in cybersecurity operations.
• Strong incident response, problem-solving and reporting skills.
• Investigative mindset with eagerness to learn and improve.

Responsibilities

• Lead end-to-end incident response engagements across the full lifecycle.
• Conduct forensic analysis on Windows, Linux, macOS, and cloud environments.
• Identify IOCs, TTPs, and scope of impact using tools like CrowdStrike and FTK.
• Communicate findings and deliver comprehensive client reports.
• Mentor junior staff and improve playbooks and tooling.
• Travel up to 5% for on-site engagements.

Skills

Incident response

Digital forensics

Client-facing

Leadership/mentoring

Report writing

Cloud platforms

Education

Bachelor's degree in Information Security / Cybersecurity

Tools

CrowdStrike

FTK

Next-gen SIEM

Magnet AXIOM

Job description

Theos is a cybersecurity company delivering premium services across Asia and beyond. We seek a DFIR Specialist / Senior SOC Analyst to lead client-facing engagements across the full incident response lifecycle, guiding organisations through complex investigations and remediation.

You will conduct forensic analysis across cloud and on-premises environments and work with senior stakeholders to provide clear, actionable remediation plans enabling stronger client resilience.