[Hiring] Senior Security Operations Specialist @Salmon Group

Role Description

You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.

What you'll do

• Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed.
• Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.
• Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.

What you'll own

• Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues.
• Own security update, patch compliance, and device configuration follow-up for corporate laptops.
• Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews.
• Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.
• Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity.
• Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.

Qualifications

• Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry.
• Working knowledge of Microsoft Sentinel and KQL for investigation and correlation.
• Experience running vulnerability management and patch compliance, including follow-up with system owners.
• Experience with DLP and access controls.
• Ability to understand the risk behind operational issues, set sensible priorities, and work independently.
• Track record of following problems through to resolution and documenting findings so others can act on them.

Benefits

• Ownership and flexibility.
• Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8).
• Company-provided tools and equipment.
• Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits.
• Access to an internal mental health support specialist.
• 22 vacation days, Philippine public holidays, and 15 sick days.
• Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications.
• Company-sponsored trips to Manila to meet and work with your team in person.
• High-performing teams can earn a dedicated beach house week in Southeast Asia.