Senior Security Operations Specialist
Confirmed on the employer's own hiring board on Nov 11, 2026. First seen by Alion on Nov 11, 2026. Salmon scores B on the Alion truth index.
Remote | UTC+8 | Core collaboration hours: 12:00-6:00 PM Manila Time
Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.
We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.
7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.
Manila-based, globally distributed, and hybrid-first - our team spans 45+ countries.
If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.
Southeast Asia's fintech moment starts here.
About the role
You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.
What you'll do
Work across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed.
Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.
Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.
What you'll own
Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues.
Own security update, patch compliance, and device configuration follow-up for corporate laptops.
Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews.
Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.
Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity.
Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.
What makes you a strong fit
Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry
Working knowledge of Microsoft Sentinel and KQL for investigation and correlation
Experience running vulnerability management and patch compliance, including follow-up with system owners
Experience with DLP and access controls
Ability to understand the risk behind operational issues, set sensible priorities, and work independently
Track record of following problems through to resolution and documenting findings so others can act on them
What we offer
Ownership and flexibility
Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)
Company-provided tools and equipment
Health and time off
Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits
Access to an internal mental health support specialist
22 vacation days, Philippine public holidays, and 15 sick days
Growth and team experience
Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications
Company-sponsored trips to Manila to meet and work with your team in person
High-performing teams can earn a dedicated beach house week in Southeast Asia
We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.