Senior Global Incident Response Lead – Forensics & Crisis

Check Point Software; Metro Manila; On-site; PHP 2,000,000 - 2,800,000; Full time

Job summary

Check Point Software in Manila seeks an experienced senior SOC incident response leader to manage daily incidents, perform forensic analyses of compromised systems, and produce remediation recommendations for enterprise customers.

You will lead global incident response efforts, build playbooks, run tabletop exercises, coordinate with cross-functional teams, and deliver clear, detailed incident reports while traveling as required.

Qualifications

• 10+ years in cybersecurity with 2–5 years in T3 incident response.
• Experience in security reviews and vulnerability risk assessments.
• Proficient with Magnet AXIOM and enterprise security solutions.
• Willingness to travel internationally.
• Ability to participate in on-call rotations, including weekends.

Responsibilities

• Manage daily incident handling for customer incidents.
• Perform incident response and forensic analysis of compromises.
• Lead incident response efforts and produce remediation recommendations.
• Develop incident response plans and playbooks.
• Coordinate cross-functional actions in global incidents.
• Prepare detailed customer incident reports and communicate findings.
• Create lab environments to test malware in sandbox.
• Support tabletop exercises with modeled attack scenarios.
• Travel domestically and internationally as required.

Skills

Cybersecurity leadership

Incident response

Forensic analysis

T3 IR experience

Security reviews

Tools

Magnet AXIOM

Job description

Check Point Software in Manila seeks an experienced senior SOC incident response leader to manage daily incidents, perform forensic analyses of compromised systems, and produce remediation recommendations for enterprise customers.

You will lead global incident response efforts, build playbooks, run tabletop exercises, coordinate with cross-functional teams, and deliver clear, detailed incident reports while traveling as required.