Senior Incident Responder, Philippines

• 3+ years of professional cybersecurity experience, including hands-on incident response delivered in a client-facing role.
• Demonstrated ability to lead investigations end-to-end across common case types (e.g. BEC, ransomware/DFIR, data breach, compromise assessment, insider, digital forensics).
• Strong technical depth across Windows, Linux, and macOS, and working comfort with at least one major cloud provider.
• Scripting ability in Python, Bash, or PowerShell — strong enough to build collection, parsing, or automation tooling without supervision.
• Clear written and verbal English; able to author client deliverables, run client meetings, and represent Blackpanda in high-stakes situations.
• Sound judgement under ambiguity — comfortable making technical and commercial calls in fast-moving, incomplete-information situations.
• Calm under pressure, with the professional posture expected of a senior client-facing operator.
• Relevant certifications such as GCIH, GCFA, GREM, GNFA, GCFR, CISSP, OSCP, or equivalent.
• Deep hands-on experience with EDR, SIEM, and forensic tooling in real-world engagements.
• Track record of mentoring or training junior responders, formally or informally.
• Contribution to tooling, automation, or methodology improvements at a previous firm — open-source or internal.
• Additional languages relevant to the regions Blackpanda serves.

How You'll Grow

You will own real engagements from day one, with the autonomy to make calls and a senior team around you to lean on. There is a clear path into leading more complex cases, technical specialisation, and broader team leadership for those who want it.

You'll join a diverse team of teammates from around the world, where who you are, the quality of your work, and your character are what matter. Trying and failing is ok. Failing to try is not.

Why This Role

If you've built real incident response chops on the front line and you're ready to lead the work — scoping cases, running them through to completion, and bringing junior responders up with you — this is the seat. We're looking for senior responders who want to shape how the work gets done, not just execute someone else's playbook.

Originally posted on Himalayas