Incident Response Analyst Check Point Software

About Check Point Software

Job Description

The world's leading vendor of Cyber Security is looking for a talented and experienced Incident Response Analyst to join our global team. At Check Point, we are dedicated to redefining the security landscape and providing cutting-edge technologies and services to our ever-growing customer base. If you are passionate about making the world a safer place, we invite you to be a part of our team. Key Responsibilities: - Managing all daily incident management of customer incidents, including complicated incidents that span the globe. - Utilizing Check Point products in incident investigations and building incident playbooks for events. - Generating detailed incident reports for customer events and performing incident response and forensic analysis of compromised systems. - Identifying and providing recommendations for remediation of DDoS events and the ability to reverse engineer malware. - Formulating and directing incident response efforts, prioritizing response efforts, and creating legible incident reports describing compromise vectors, attacker methodologies, and data exfiltration artifacts. - Performing forensic analysis of Windows and Unix systems to identify compromise artifacts. - Building sandbox/test lab environments to evaluate malicious code and working within a team environment to coordinate work actions effectively. Qualifications: - Minimum 3 years of experience in incident response with emphasis on system compromise analysis, security reviews, and vulnerability risk assessments using manual procedures and automated analysis tools. - Minimum 3 years of experience with the TCP/IP protocol suite, security architecture, and remote access security techniques/products. - Minimum 1 year of experience with enterprise anti-virus solutions, virus outbreak management, and distinguishing virus activity from directed attack patterns. - Minimum 3 years of experience with endpoint or network forensics. - Strong skills in technical and non-technical documentation in English. - Ability to participate in on-call rotation and willingness for domestic and international travel. - Candidates must have an existing work right in at least one of the following countries: Philippines, India, Singapore, or Australia. No relocation assistance/sponsorship provided for this role. If you are a dedicated and skilled professional looking to contribute to the field of Cyber Security, we welcome you to explore this exciting opportunity with us at Check Point.,