Security Specialist
At a glance
Mid-level Security Operations & Analysis role at Sourcefit. Remote, Philippines · full-time.
Pay not stated Security Specialist salary
remoteroles summary, based on the employer's posting.
What you'll do
- Watch for security alerts, investigate suspicious activity and handle incidents across customer environments
- Hunt threats and carry out containment, removal and recovery steps for malware, ransomware and endpoint risks
- Triage and resolve alerts from EDR, MDR and SIEM tools, then analyze what caused the incident
- Troubleshoot security issues remotely, escalating complex cases and coordinating with internal teams
- Keep incident records current and build operational procedures, runbooks and security reports
What you bring
- At least three years in cybersecurity, incident response, SOC or MDR work
- Practical experience with EDR tools; SentinelOne experience is strongly preferred
- You have investigated and remediated threats, with exposure to SIEM platforms
Who this fits
This role suits a security operations professional who can investigate and remediate threats independently in a remote setting. It is fully remote, with an overnight shift from 8pm to 7am EST on the listed Sunday-to-Wednesday and Thursday-to-Sunday schedules, and follows US holidays.
From the employer
Overview
We are seeking a Cybersecurity Engineer to support after-hours security operations, threat management, and incident response activities across customer environments. This role is fully remote and focused on monitoring, investigating, and remediating security threats using Endpoint Detection and Response (EDR) platforms, with SentinelOne experience strongly preferred.
Job Details
Work-from-home
Sunday to Wednesday, 8pm-7am EST and Thursday to Sunday, 8pm-7am EST
Following US Holidays
Responsibilities
- Monitor, investigate, and respond to security alerts and incidents.
- Perform threat hunting, containment, eradication, and recovery activities.
- Analyze suspicious activity, malware, ransomware, and endpoint threats.
- Manage and remediate alerts generated by EDR, MDR, and SIEM platforms.
- Conduct root cause analysis and document findings.
- Perform remote troubleshooting and remediation of cybersecurity-related issues.
- Escalate complex incidents when necessary and coordinate with internal teams.
- Maintain accurate incident documentation, remediation records, and security reports.
- Develop and maintain security procedures, runbooks, and operational documentation.
- Review customer environments and recommend security improvements.
Preferred Experience
- 3+ years of cybersecurity, incident response, SOC, or MDR experience.
- Hands-on experience with EDR platforms, including:
- SentinelOne (preferred)
- DNSFilter
- Microsoft Defender for Endpoint
Experience with threat detection, investigation, and remediation.
- Experience with SIEM solutions such as Splunk, Microsoft Sentinel, or similar platforms.
- Working knowledge of Windows Server, Active Directory, and Microsoft 365 environments.
- Experience with PowerShell or other automation tools is a plus.
- Experience working within ticketing and incident management systems.
Skills
- Strong analytical and problem-solving abilities.
- Ability to work independently in a remote environment.
- Excellent written and verbal communication skills.
- Ability to prioritize and manage multiple active incidents.
- Strong attention to detail and documentation.
Work Environment
- 100% Remote
- After-hours shift
- No on-site work required
- Focused on security operations, threat management, and incident response
Ideal Candidate
A security-focused professional with strong EDR experience who can independently investigate and remediate security threats. Candidates with direct SentinelOne administration and incident response experience will be highly preferred.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.