Senior Security Operations Specialist

Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines. You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.

Responsibilities

Help run and improve practical security controls across Salmon; Drive recurring risks to resolution; Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed; Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation; Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one; Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues; Own security update, patch compliance, and device configuration follow-up for corporate laptops; Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews; Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations; Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity; Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful

Requirements

Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry; Working knowledge of Microsoft Sentinel and KQL for investigation and correlation; Experience running vulnerability management and patch compliance, including follow-up with system owners; Experience with DLP and access controls; Ability to understand the risk behind operational issues, set sensible priorities, and work independently; Track record of following problems through to resolution and documenting findings so others can act on them

Benefits

Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8); Company-provided tools and equipment; Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits; Access to an internal mental health support specialist; 22 vacation days, Philippine public holidays, and 15 sick days; Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications; Company-sponsored trips to Manila to meet and work with your team in person; High-performing teams can earn a dedicated beach house week in Southeast Asia