Senior Security Analyst - Cloud & Incident Response

Staffstream; Taguig; Hybrid; PHP 900,000 - 1,200,000; Full time

Benefits offered by this job

HMO with 1 free dependent

Life Insurance

Paid Leave Credits

Government-mandated benefits (SSS,Phil

Work-from-home equipment provided

Job summary

Staffstream in the Philippines is seeking a Senior Security Analyst to bolster cyber defence across a cloud-only Microsoft 365 environment. This hands-on role combines day-to-day incident response with ownership of security uplift projects.

You'll operate security operations, threat hunting, and governance efforts while deploying and validating policies in Intune and Defender, coordinating with leadership. Hybrid work, with monthly on-site in BGC, Taguig, and country-based employment, offers a

Qualifications

• Bachelor's degree required or equivalent, in CS, IS, or related field.
• Minimum 2-3+ years in Security Analyst, SOC Analyst, or Blue Team role.
• Hands-on Microsoft Defender suite experience and identity protection.

Responsibilities

• Operate daily security alert triage across Defender, Sentinel, and Entra ID.
• Execute incident response end-to-end with documented playbooks.
• Write and tune KQL queries and detection rules for threat hunting.
• Drive security uplift projects like MFA maturity, CA, and app control.
• Manage identity, endpoint, and cloud security in Intune and Defender.
• Report incidents to leadership and maintain SOC runbooks.
• Leverage AI to accelerate query authoring and reporting.

Skills

Incident response

Threat hunting

Proactive security mindset

Documentation & reporting

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Defender suite

Entra ID (Azure AD)

Microsoft Purview

MCAS

Intune

Sentinel

Job description

Staffstream in the Philippines is seeking a Senior Security Analyst to bolster cyber defence across a cloud-only Microsoft 365 environment. This hands-on role combines day-to-day incident response with ownership of security uplift projects.

You'll operate security operations, threat hunting, and governance efforts while deploying and validating policies in Intune and Defender, coordinating with leadership. Hybrid work, with monthly on-site in BGC, Taguig, and country-based employment, offers a