FinTech Security Operations Lead

Globe Telecom, Inc.; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Globe Telecom, Inc. is seeking a Security Operations Specialist to monitor security alerts, investigate incidents, and coordinate containment actions. The role requires experience in security operations, SIEM/EDR usage, and threat framework knowledge, with a focus on high-volume, rapid-response environments.

The successful candidate will help mature detection, triage quality, and incident documentation while collaborating with cross-functional teams to protect critical fintech and telecom assets.

Qualifications

• Experience in security monitoring, incident response, or security operations center work.
• Working knowledge of SIEM, EDR, email security, cloud security, and related security monitoring tools.
• Ability to analyze logs, investigate suspicious activity, and form evidence-based conclusions.
• Familiarity with MITRE ATT&CK, attacker behavior mapping, or comparable investigative frameworks.

Responsibilities

• Monitor and respond to security alerts from SIEM and other security tools.
• Perform incident response activities including discovery, threat analysis, and containment.
• Document investigations clearly with escalation notes and actionable details.
• Support containment and response actions and coordinate with leads and system owners.
• Identify false positives and contribute to SOC process improvements.

Skills

Security monitoring

Incident response

SIEM

EDR

Cloud security

Technical documentation

MITRE ATT&CK

Education

Bachelor’s degree in CS/IT

Tools

SIEM

EDR

IDS

DLP

Firewalls

Vulnerability scanning

SOAR

Job description

Globe Telecom, Inc. is seeking a Security Operations Specialist to monitor security alerts, investigate incidents, and coordinate containment actions. The role requires experience in security operations, SIEM/EDR usage, and threat framework knowledge, with a focus on high-volume, rapid-response environments.

The successful candidate will help mature detection, triage quality, and incident documentation while collaborating with cross-functional teams to protect critical fintech and telecom assets.