Remote Incident Response Specialist & Threat Hunter

CyberOne; Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

CyberOne is seeking an Incident Response Specialist to guide customers through all stages of cyber incidents, from initial investigation to containment, eradication, and recovery, with a focus on delivering clear post‑incident reporting.

You will work on proactive security services, threat hunting, and threat intelligence, collaborating with clients and internal teams to develop playbooks, detection content, and remediation guidance.

Qualifications

• Relevant experience in Cyber Security or Incident Response.
• Strong English communication skills.

Responsibilities

• Investigate cyber security incidents affecting customer environments.
• Analyse endpoint, network, cloud and identity‑based evidence.
• Perform host‑based investigations across Windows and Microsoft 365 environments.
• Support containment, eradication and recovery activities.
• Identify attacker tactics, techniques and procedures (TTPs) using the MITRE ATT&CK framework.
• Collect, preserve and analyse forensic artefacts where appropriate.
• Produce Indicators of Compromise (IOCs) and detection recommendations.
• Support evidence collection for regulatory or legal requirements.

Skills

Cyber Security

Incident Response

English Communication

Tools

Defender XDR

Microsoft Sentinel

Windows Event Logs

Sysmon

Entra ID

Exchange Online

Malware Analysis

Job description

CyberOne is seeking an Incident Response Specialist to guide customers through all stages of cyber incidents, from initial investigation to containment, eradication, and recovery, with a focus on delivering clear post‑incident reporting.

You will work on proactive security services, threat hunting, and threat intelligence, collaborating with clients and internal teams to develop playbooks, detection content, and remediation guidance.