Security Operations Specialist

Remote | UTC+8 | Core collaboration hours: 12:00–6:00 PM Manila Time Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines. We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region. 7M+ app downloads. 2M+ monthly active users.

7,000+ partner stores. US $310M+ raised from leading global investors. Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries. If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us. Southeast Asia's fintech moment starts here. You'll help run and improve practical security controls across Salmon, a regulated group spanning banking, consumer finance, and a shared technology platform, and drive recurring risks to resolution.

Work across Microsoft Defender, Intune, Entra , Microsoft 365 and Sentinel to find security issues, judge how much they matter, and get them fixed. Work daily with the Manager, Security Operations and with IT and engineering teams, moving issues from identification to remediation. Take cases from the Security Service Desk, find the underlying cause, and fix recurring problems instead of closing tickets one by one.

Own the operational side of vulnerability management: review findings, prioritise by risk, track remediation, and elevate material or overdue issues. Own security update, patch compliance, and device configuration follow-up for corporate laptops. Own day-to-day DLP and access controls: alert review, investigations, suspicious sign-ins, privileged access monitoring, SSO coverage, and periodic access reviews. Run the security awareness platform and LMS: training campaigns, completion tracking, reporting, and phishing simulations.

Investigate and resolve security Service Desk cases covering endpoints, access, policy exceptions, and suspicious activity. Improve recurring Security Operations work through better processes, KQL queries, playbooks, documentation, and lightweight automation, including Sentinel detections where useful.

• Hands-on experience with Microsoft Defender XDR / Defender for Endpoint, Intune, Entra , and Microsoft 365 security and audit telemetry
• Working knowledge of Microsoft Sentinel and KQL for investigation and correlation
• Experience running vulnerability management and patch compliance, including follow-up with system owners
• Experience with DLP and access controls
• Ability to understand the risk behind operational issues, set sensible priorities, and work independently
• Track record of following problems through to resolution and documenting findings so others can act on them

• Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications
• Company-sponsored trips to Manila to meet and work with your team in person
• High-performing teams can earn a dedicated beach house week in Southeast Asia
• We believe strong teams are built by people with different backgrounds, experiences, and points of view. Salmon is an equal opportunity employer, and we make hiring decisions based on skills, experience, and potential.

• Ownership and flexibility
• Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)
• Company-provided tools and equipment
• Health and time off
• Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits
• Access to an internal mental health support specialist
• 22 vacation days, Philippine public holidays, and 15 sick days