{"id":4055810,"url":"https://alion.io/job/salmon-senior-security-operations-specialist","title":"Senior Security Operations Specialist","company":{"id":2207044,"name":"Salmon","domain":"salmon.group","url":"https://alion.io/company/salmon-group","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":7,"ghost_share":0,"stale_share":0.857,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"UTC+8","utc_offset_min":8,"utc_offset_max":8},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["KZ","PL","RS","GE"],"hiring_countries_total":4,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Service Desk","optional":false}],"status":"live","first_seen_at":"2026-11-11T04:12:35Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T04:52:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Remote | UTC+8 | Core collaboration hours: 12:00-6:00 PM Manila Time\nSalmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.\nWe combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.\n7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.\nManila-based, globally distributed, and hybrid-first - our team spans 45+ countries.\nIf you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.\nSoutheast Asia's fintech moment starts here.\nAbout the role\nYou'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.\nWhat you'll do\nWork across Microsoft Defender, Intune, Entra ID, Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed.\n\nWork daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation.\n\nTake cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.\n\nWhat you'll own\nOwn the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and escalate material or overdue issues.\n\nOwn security update, patch compliance, and device configuration follow-up for corporate laptops.\n\nOwn day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews.\n\nRun the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.\n\nInvestigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity.\n\nImprove recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.\n\nWhat makes you a strong fit\nHands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra ID, and Microsoft 365 security and audit telemetry\n\nWorking knowledge of Microsoft Sentinel and KQL for investigation and correlation\n\nExperience running vulnerability management and patch compliance, including follow-up with system owners\n\nExperience with DLP and access controls\n\nAbility to understand the risk behind operational issues, set sensible priorities, and work independently\n\nTrack record of following problems through to resolution and documenting findings so others can act on them\n\nWhat we offer\nOwnership and flexibility\nFully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)\n\nCompany-provided tools and equipment\n\nHealth and time off\nMedical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits\n\nAccess to an internal mental health support specialist\n\n22 vacation days, Philippine public holidays, and 15 sick days\n\nGrowth and team experience\nOpportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications\n\nCompany-sponsored trips to Manila to meet and work with your team in person\n\nHigh-performing teams can earn a dedicated beach house week in Southeast Asia\n\nWe believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.","description_format":"text","description_chars":3884,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Kazakhstan","iso":"KZ","kind":"country"},{"name":"Poland","iso":"PL","kind":"country"},{"name":"Serbia","iso":"RS","kind":"country"},{"name":"Georgia","iso":"GE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Banks & Neobanks","Consumer Loans & Pawnshops","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-11-11T04:52:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":16,"reasons":["conf:0","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/salmon-senior-security-operations-specialist","json_url":"https://alion.io/job/salmon-senior-security-operations-specialist.json","meta":{"generated_at":"2026-11-11T07:10:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10725,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2207044},"rest":"https://alion.io/mcp/rest/get_company?id=2207044"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsalmon-senior-security-operations-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsalmon-senior-security-operations-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsalmon-senior-security-operations-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/salmon-senior-security-operations-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsalmon-senior-security-operations-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4055810}},{"tool":"search_jobs","arguments":{"company":"salmon.group","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4055810},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}