Senior Service Desk Analyst Security Operations

We're Hiring: Senior Service Desk Analyst – Security Operations!

Join our dynamic team as a Senior Service Desk Analyst specializing in Security Operations! We are looking for an experienced cybersecurity professional to lead complex security incident investigations, strengthen threat detection capabilities, and drive continuous improvement across endpoint, cloud, and identity security environments. Your technical expertise and leadership will be essential in protecting client environments, optimizing security operations, and mentoring junior analysts.

Location: Mandaluyong, Philippines
Work Mode: Work from Office for 3 months, will transition to hybrid after
Role: Senior Service Desk Analyst – Security Operations

What You'll Do:

Lead advanced threat triage, investigate complex security incidents, and handle high-priority escalations
Utilize EDR/XDR platforms such as CrowdStrike Falcon and Microsoft Defender to investigate threats and contain compromised endpoints
Analyze Darktrace behavioral analytics and network telemetry to detect suspicious activities, anomalies, and potential lateral movement
Conduct root cause analysis (RCA), forensic investigations, and incident lifecycle management
Investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments
Optimize detection rules, alert correlation logic, and automated incident response playbooks
Maintain detailed incident reports, forensic documentation, and standard operating procedures (SOPs)
Mentor junior analysts, review incident documentation, and ensure adherence to security protocols and SLAs

What We're Looking For:

Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or a related field; a relevant technical diploma may be considered with strong cybersecurity experience
Minimum 5 years of hands-on cybersecurity, SOC, or incident response experience, including at least 2 years in an L2/Senior Analyst or equivalent role
Strong experience in security alert triage, threat investigation, containment, escalation, and root cause analysis
Hands-on experience with EDR/XDR platforms, preferably CrowdStrike Falcon and/or Microsoft Defender XDR
Working knowledge of SIEM, Entra ID / Azure AD, endpoint and cloud security, IOCs, and threat hunting
Experience in detection tuning, automation, and incident response playbooks
Familiarity with Darktrace or equivalent behavioral analytics solutions is an advantage
CompTIA Security+ or an equivalent recognized cybersecurity certification is mandatory
CrowdStrike Certified Falcon Administrator certification is an advantage
Strong analytical, problem-solving, communication, and technical documentation skills
Ability to independently manage complex security incidents and mentor junior team members
Willingness to work onsite in Mandaluyong, Philippines

Eager to take your cybersecurity expertise to the next level Apply now and become part of our mission to strengthen security, respond to emerging threats, and deliver operational excellence!