Senior Service Desk Analyst – Security Operations

Eastvantage Group; Mandaluyong; Hybrid; PHP 1,200,000 - 2,000,000; Full time

Job summary

Eastvantage Group is seeking a Senior Service Desk Analyst – Security Operations to lead complex security investigations and drive improvements across endpoint, cloud, and identity security. The role requires hands-on incident response experience and mentorship of junior analysts, with onsite work in Mandaluyong, Philippines.

You will work with EDR/XDR tools (CrowdStrike Falcon, Microsoft Defender), SIEM, and threat analytics to strengthen detection and response across client environments.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• Minimum 5 years in cybersecurity, SOC, or incident response.
• Experience with EDR/XDR platforms.
• Mandatory CompTIA Security+ certification.

Responsibilities

• Lead complex security incidents and high-priority escalations.
• Tune detections, automate response playbooks.
• Mentor junior analysts and document SOPs.
• Maintain incident reports and post-incident RCA.

Skills

Threat analysis

Incident response

Leadership

Mentoring

Education

Bachelor’s degree in Cybersecurity/IT/CS/IS/CE

Tools

CrowdStrike Falcon

Microsoft Defender

Darktrace

Job description

We’re Hiring: Senior Service Desk Analyst – Security Operations!

Join our dynamic team as a Senior Service Desk Analyst specializing in Security Operations! We are looking for an experienced cybersecurity professional to lead complex security incident investigations, strengthen threat detection capabilities, and drive continuous improvement across endpoint, cloud, and identity security environments. Your technical expertise and leadership will be essential in protecting client environments, optimizing security operations, and mentoring junior analysts.

Location: Mandaluyong, Philippines
Work Mode: Work from Office for 3 months, will transition to hybrid after
Role: Senior Service Desk Analyst – Security Operations

What You’ll Do:

• Lead advanced threat triage, investigate complex security incidents, and handle high-priority escalations
• Utilize EDR/XDR platforms such as CrowdStrike Falcon and Microsoft Defender to investigate threats and contain compromised endpoints
• Analyze Darktrace behavioral analytics and network telemetry to detect suspicious activities, anomalies, and potential lateral movement
• Conduct root cause analysis (RCA), forensic investigations, and incident lifecycle management
• Investigate identity-based threats, suspicious authentications, and compromised credentials across Entra ID / Azure AD environments
• Optimize detection rules, alert correlation logic, and automated incident response playbooks
• Maintain detailed incident reports, forensic documentation, and standard operating procedures (SOPs)
• Mentor junior analysts, review incident documentation, and ensure adherence to security protocols and SLAs

What We’re Looking For:

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Information Systems, Computer Engineering, or a related field; a relevant technical diploma may be considered with strong cybersecurity experience
• Minimum 5 years of hands-on cybersecurity, SOC, or incident response experience, including at least 2 years in an L2/Senior Analyst or equivalent role
• Strong experience in security alert triage, threat investigation, containment, escalation, and root cause analysis
• Hands-on experience with EDR/XDR platforms, preferably CrowdStrike Falcon and/or Microsoft Defender XDR
• Working knowledge of SIEM, Entra ID / Azure AD, endpoint and cloud security, IOCs, and threat hunting
• Experience in detection tuning, automation, and incident response playbooks
• Familiarity with Darktrace or equivalent behavioral analytics solutions is an advantage
• CompTIA Security+ or an equivalent recognized cybersecurity certification is mandatory
• CrowdStrike Certified Falcon Administrator certification is an advantage
• Strong analytical, problem-solving, communication, and technical documentation skills
• Ability to independently manage complex security incidents and mentor junior team members
• Willingness to work onsite in Mandaluyong, Philippines