Senior Security Operations Specialist

About the role

Salmon is a fintech company building a banking and lending platform across Southeast Asia, with a Manila-based, globally distributed and hybrid-first team. This fully remote Senior Security Operations Specialist works on practical security controls across a regulated group spanning banking, consumer finance and a shared technology platform, driving recurring risks to resolution. Collaboration hours are 12:00 to 6:00 PM Manila time (UTC+8).

Key responsibilities

• Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, assess their importance and get them fixed.
• Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.
• Take cases from the Security Service Desk, find the root cause and fix recurring problems instead of closing tickets one by one.
• Own vulnerability management: review findings, prioritise by risk, track remediation and escalate material or overdue issues.
• Own security update and patch compliance, and device configuration follow-up for corporate laptops.
• Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage and periodic access reviews.
• Run the security awareness platform and LMS: training campaigns, completion tracking, reporting and phishing simulations.
• Investigate and resolve service desk cases covering endpoints, access, policy exceptions and suspicious activity.
• Improve recurring work through better processes, KQL queries, playbooks, documentation and lightweight automation, including Sentinel detections.

Required profile

• Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID and Microsoft 365 security and audit telemetry.
• Working knowledge of Microsoft Sentinel and KQL for investigation and correlation.
• Experience running vulnerability management and patch compliance, including follow-up with system owners.
• Experience with DLP and access controls.
• Able to understand the risk behind operational issues, set sensible priorities and work independently.
• Track record of following problems through to resolution and documenting findings.

What we offer

• Fully remote work with core collaboration hours 12:00 to 6:00 PM Manila time.
• Company-provided tools and equipment.
• Health and time off, medical insurance support for you and your family, and 22 vacation days, Philippine public holidays and 15 sick days.
• Internal expert meetups, external conferences, speaking opportunities and industry publications.
• Company-sponsored trips to Manila and a beach house week for high-performing teams.