Security Operations Lead: Incident Response & IAM

Appen Limited; Philippines; On-site; PHP 540,000 - 720,000; Full time

Job summary

Appen Limited is seeking an IT Security Analyst to protect and improve our security controls. You will own security operations across Defender XDR, lead incident response, and drive IAM, PAM, and patch management while maintaining ISO 27001 documentation.

The role focuses on monitoring Defender XDR and Sentinel, leading security incidents end-to-end, and ensuring audit-ready ISMS evidence. Strong scripting (PowerShell/Python) and stakeholder communication are essential.

Qualifications

• 1-3 years' experience in a security operations or security analyst role.
• Hands-on experience with Microsoft Defender XDR, Sentinel and Entra ID.
• Experience leading security incidents and producing incident reports.
• Working knowledge of ISO 27001 controls and audit processes.
• Experience with IAM, access reviews, PAM and patch management.
• Proficiency with KQL and PowerShell or Python.
• Strong communication skills with technical and non-technical stakeholders.

Responsibilities

• SOC & Alert Management: Monitor, triage and resolve alerts in Microsoft Defender XDR and Sentinel; tune detections to reduce false positives and improve response times.
• Incident Response: Lead incidents end-to-end (containment, eradication, recovery, lessons learned); maintain the Incident Response Plan and playbooks.
• ISO 27001: Maintain ISMS policies, risk register and audit evidence; support internal and external audits and close findings.
• IAM & Access Reviews: Administer Entra ID (Conditional Access, MFA); run quarterly user and privileged access reviews and enforce least privilege.
• PAM: Operate the Privileged Access Management solution, including PIM and break-glass accounts.
• Patch & Vulnerability Management: Own vulnerability remediation and monthly patch cycles; report compliance against SLAs.
• Cost Optimisation: Manage security licences and Sentinel log ingestion to optimise cost without reducing coverage.

Skills

Microsoft Defender XDR

Sentinel

Entra ID

Incident response

ISO 27001

IAM

PAM

KQL

PowerShell

Python

Communication skills

Job description

Appen Limited is seeking an IT Security Analyst to protect and improve our security controls. You will own security operations across Defender XDR, lead incident response, and drive IAM, PAM, and patch management while maintaining ISO 27001 documentation.

The role focuses on monitoring Defender XDR and Sentinel, leading security incidents end-to-end, and ensuring audit-ready ISMS evidence. Strong scripting (PowerShell/Python) and stakeholder communication are essential.