Senior Service Desk Analyst - Security Operations

Eastvantage Business Solutions Inc.; Eastern Manila District; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Eastvantage Business Solutions Inc. in Mandaluyong is seeking a Senior Service Desk Analyst – Security Operations to lead threat triage, investigations, and incident lifecycle management.

You will mentor junior analysts, optimize detection rules, automate responses, and coordinate across EDR/XDR platforms (CrowdStrike Falcon, Microsoft Defender XDR), while ensuring SLAs and security protocols are consistently followed.

Qualifications

• Bachelor's degree in cybersecurity or related field.
• Minimum 5 years in cybersecurity/SOC/IR with 2+ years in L2/Senior role.
• Hands-on with EDR/XDR platforms, preferably CrowdStrike Falcon and Microsoft Defender XDR.
• Knowledge of SIEM, Entra ID/Azure AD, endpoint and cloud security, IOCs, threat hunting.
• Experience in detection tuning, automation, and incident response playbooks.
• CompTIA Security+ certification mandatory; CrowdStrike Falcon Administrator certification is a plus.
• Willingness to work onsite in Mandaluyong, Philippines.

Responsibilities

• Lead advanced threat triage, investigate complex security incidents, and handle high-priority escalations.
• Utilize EDR/XDR platforms such as CrowdStrike Falcon and Microsoft Defender to investigate threats and contain compromised endpoints.
• Analyze Darktrace behavioral analytics and network telemetry to detect suspicious activities, anomalies, and potential lateral movement.
• Conduct root cause analysis (RCA), forensic investigations, and incident lifecycle management.
• Investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments.
• Optimize detection rules, alert correlation logic, and automated incident response playbooks.
• Maintain detailed incident reports, forensic documentation, and standard operating procedures (SOPs).
• Mentor junior analysts, review incident documentation, and ensure adherence to security protocols and SLAs.

Skills

Threat triage

Incident investigation

Containment

Root cause analysis

Automated playbooks

Threat hunting

SIEM

Entra ID/Azure AD

Endpoint security

Cloud security

IOCs

Automation

Darktrace familiarity

Analytical skills

Communication

Technical documentation

Mentoring

Onsite work readiness

Education

Bachelor's degree in Cybersecurity

CompTIA Security+

CrowdStrike Certified Falcon Administrator

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Darktrace

Job description

We're Hiring: Senior Service Desk Analyst – Security Operations!

Join our dynamic team as a Senior Service Desk Analyst specializing in Security Operations! We are looking for an experienced cybersecurity professional to lead complex security incident investigations, strengthen threat detection capabilities, and drive continuous improvement across endpoint, cloud, and identity security environments. Your technical expertise and leadership will be essential in protecting client environments, optimizing security operations, and mentoring junior analysts.

Location: Mandaluyong, Philippines

Work Mode: Work from Office for 3 months, will transition to hybrid after

Role: Senior Service Desk Analyst – Security Operations

What You'll Do:

• Lead advanced threat triage, investigate complex security incidents, and handle high-priority escalations
• Utilize EDR/XDR platforms such as CrowdStrike Falcon and Microsoft Defender to investigate threats and contain compromised endpoints
• Analyze Darktrace behavioral analytics and network telemetry to detect suspicious activities, anomalies, and potential lateral movement
• Conduct root cause analysis (RCA), forensic investigations, and incident lifecycle management
• Investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments
• Optimize detection rules, alert correlation logic, and automated incident response playbooks
• Maintain detailed incident reports, forensic documentation, and standard operating procedures (SOPs)
• Mentor junior analysts, review incident documentation, and ensure adherence to security protocols and SLAs

What We're Looking For:

• Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or a related field; a relevant technical diploma may be considered with strong cybersecurity experience
• Minimum 5 years of hands-on cybersecurity, SOC, or incident response experience, including at least 2 years in an L2/Senior Analyst or equivalent role
• Strong experience in security alert triage, threat investigation, containment, escalation, and root cause analysis
• Hands‑on experience with EDR/XDR platforms, preferably CrowdStrike Falcon and/or Microsoft Defender XDR
• Working knowledge of SIEM, Entra ID / Azure AD, endpoint and cloud security, IOCs, and threat hunting
• Experience in detection tuning, automation, and incident response playbooks
• Familiarity with Darktrace or equivalent behavioral analytics solutions is an advantage
• CompTIA Security+ or an equivalent recognized cybersecurity certification is mandatory
• CrowdStrike Certified Falcon Administrator certification is an advantage
• Strong analytical, problem-solving, communication, and technical documentation skills
• Ability to independently manage complex security incidents and mentor junior team members
• Willingness to work onsite in Mandaluyong, Philippines

Eager to take your cybersecurity expertise to the next level?