FinTech Security Operations Specialist

Mynt; Metro Manila; On-site; PHP 450,000 - 800,000; Full time

Job summary

Mynt’s GCash unit is seeking a Security Operations Specialist to monitor alerts, perform triage, and coordinate incident response. The role focuses on applying MITRE ATT&CK concepts to understand attacker behavior, validating activity, and supporting containment actions.

You will document cases and contribute to SOC playbooks and detections. The successful candidate will work in a fast-paced FinTech environment, ensure accurate investigations, and participate in continuous improvement of

Qualifications

• Experience in security monitoring, incident response, or security operations center work.
• Working knowledge of SIEM, EDR, email security, cloud security, and related security monitoring tools.
• Ability to analyze logs, investigate suspicious activity, and form evidence-based conclusions.
• Familiarity with MITRE ATT&CK, attacker behavior mapping, or comparable investigative frameworks.

Responsibilities

• Monitor and respond to security alerts from SIEM or other tools and triage by severity and evidence.
• Review alerts using SOC playbooks and determine true/false positives or escalation needs.
• Perform advanced incident response including discovery, threat analysis, remediation, and containment.
• Document investigations clearly and prepare escalation notes with assets, steps, and hypotheses.
• Escalate cases for deeper response, stakeholder coordination, or containment approval.

Skills

Security monitoring

Incident response

Log analysis

MITRE ATT&CK familiarity

Technical writing

Decision making under pressure

Education

Bachelor’s degree in CS/IT or related field

Tools

SIEM

EDR

Email security

Cloud security

Firewalls

DLP

Vulnerability scanning

Job description

Mynt’s GCash unit is seeking a Security Operations Specialist to monitor alerts, perform triage, and coordinate incident response. The role focuses on applying MITRE ATT&CK concepts to understand attacker behavior, validating activity, and supporting containment actions.

You will document cases and contribute to SOC playbooks and detections. The successful candidate will work in a fast-paced FinTech environment, ensure accurate investigations, and participate in continuous improvement of