Security Specialist | WFH (A-VEIT)

Sourcefit Philippines, Inc.; Quezon City; À distance; PHP 700 000 - 1 000 000; Plein temps

Résumé du poste

Sourcefit Philippines, Inc. is seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response across customer environments.

This fully remote role focuses on monitoring, investigating, and remediating threats using EDR platforms, with SentinelOne experience strongly preferred. Responsibilities include monitoring security alerts, threat containment, incident resolution, and documenting findings.

Qualifications

• 3+ years of cybersecurity, incident response, SOC, or MDR experience.
• Hands-on with EDR platforms, SentinelOne preferred.
• Experience with SIEM tools (Splunk, Microsoft Sentinel).
• Experience with Windows Server, Active Directory, and Microsoft 365.
• PowerShell or other automation tools is a plus.
• Experience working in ticketing and incident management systems.

Responsabilités

• Monitor, investigate, and respond to security alerts and incidents.
• Perform threat hunting, containment, eradication, and recovery activities.
• Analyze malware, ransomware, and endpoint threats.
• Manage alerts from EDR, MDR, and SIEM platforms.
• Conduct root cause analysis and document findings.
• Remote troubleshooting and remediation of cybersecurity issues.
• Escalate incidents and coordinate with internal teams.
• Maintain incident documentation and security reports.
• Develop runbooks and operational procedures.
• Review customer environments and recommend security improvements.

Connaissances

Incident Response

SOC/MDR

Threat Hunting

EDR (SentinelOne)

SIEM: Splunk

SIEM: Microsoft Sentinel

Windows Server

Active Directory

Microsoft 365

PowerShell

Documentation

Outils

SentinelOne

DNSFilter

Microsoft Defender for Endpoint

Splunk

Microsoft Sentinel

Description du poste

Overview

We are seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response activities across customer environments. This role is fully remote and focused on monitoring, investigating, and remediating security threats using Endpoint Detection and Response (EDR) platforms, with SentinelOne experience strongly preferred.

Job Details

Work-from-home

Sunday to Wednesday, 8pm-7am EST and Thursday to Sunday, 8pm-7am EST

Following US Holidays

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Perform threat hunting, containment, eradication, and recovery activities.
• Analyze suspicious activity, malware, ransomware, and endpoint threats.
• Manage and remediate alerts generated by EDR, MDR, and SIEM platforms.
• Conduct root cause analysis and document findings.
• Perform remote troubleshooting and remediation of cybersecurity-related issues.
• Escalate complex incidents when necessary and coordinate with internal teams.
• Maintain accurate incident documentation, remediation records, and security reports.
• Develop and maintain security procedures, runbooks, and operational documentation.
• Review customer environments and recommend security improvements.

Preferred Experience

• 3+ years of cybersecurity, incident response, SOC, or MDR experience.
• Hands-on experience with EDR platforms, including:
• SentinelOne (preferred)
• DNSFilter
• Microsoft Defender for Endpoint

Experience with threat detection, investigation, and remediation.

• Experience with SIEM solutions such as Splunk, Microsoft Sentinel, or similar platforms.
• Working knowledge of Windows Server, Active Directory, and Microsoft 365 environments.
• Experience with PowerShell or other automation tools is a plus.
• Experience working within ticketing and incident management systems.

Skills

• Strong analytical and problem-solving abilities.
• Ability to work independently in a remote environment.
• Excellent written and verbal communication skills.
• Ability to prioritize and manage multiple active incidents.
• Strong attention to detail and documentation.

Work Environment

• 100% Remote
• After-hours shift
• No on-site work required
• Focused on security operations, threat management, and incident response

Ideal Candidate

A security-focused professional with strong EDR experience who can independently investigate and remediate security threats. Candidates with direct SentinelOne administration and incident response experience will be highly preferred