Sr Security Operations Analyst

Deltek, Inc; Philippines; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Deltek, Inc. is seeking a Security Operations Engineer in the Philippines to join Enterprise Security & Technology Services (ESTS).

You will monitor security alerts across platforms, perform advanced investigations, develop incident response playbooks, conduct threat hunting, and collaborate with IT, engineering and compliance teams. The role requires on-call/shift work and a proactive, collaborative mindset.

Qualifications

• BA/BS in computer science, information technology, cybersecurity, or related field; SANS training or equivalent.
• 3+ years of experience in information security, including hands-on incident response and SIEM monitoring.
• Experience with incident management, including incident handling, malware cleanup, and investigations.
• Strong understanding of operating systems (Windows, Unix/Linux).
• Experience with SIEM monitoring, alert triage, and event correlation.
• Familiarity with threat-hunting concepts and the MITRE ATT&CK framework.
• Ability to quickly prioritize and correlate multiple unstructured events and incidents.
• Strong analytical, communication, and teamwork skills for a highly collaborative environment.
• Ability to perform on-call/shift work and work after normal business hours as needed.

Responsibilities

• Lead the monitoring and analysis of security alerts and events across multiple platforms and environments.
• Perform advanced investigations of security incidents, including root-cause analysis and remediation planning.
• Develop and refine incident response playbooks and standard operating procedures.
• Conduct threat-hunting activities to proactively identify potential risks and vulnerabilities.
• Collaborate with IT, engineering, and compliance teams to implement security best practices and controls.
• Support vulnerability management processes and help ensure timely remediation of identified issues.
• Automate repetitive tasks to improve the efficiency and consistency of security operations.
• Leverage Generative AI and AI-enabled tools in daily work activities to improve the speed, quality, and consistency of security operations, ensuring all AI use is responsible, secure, and aligned with Deltek’s AI usage, acceptable use, and data-protection policies.
• Stay informed on emerging threats, attack vectors, and security technologies to enhance detection and response capabilities.
• Provide on-call Security Operations support based on assigned shift.
• Perform other duties as assigned.

Skills

Information security

Incident response

SIEM monitoring

Log analysis

Windows/Unix/Linux

Threat hunting

MITRE ATT&CK

On-call work

Communication

Teamwork

Education

BA/BS in CS/IT/cybersecurity or related field

SANS training or equivalent

Job description

As the recognized global standard for project-based businesses, Deltek delivers software and information solutions to help organizations achieve their purpose. Our market leadership stems from the work of our diverse employees who are united by a passion for learning, growing and making a difference. At Deltek, we take immense pride in creating a balanced, values-driven environment, where every employee feels included and empowered to do their best work. Our employees put our core values into action daily, creating a one-of-a-kind culture that has been recognized globally. Thanks to our incredible team, Deltek has been named one of America's Best Midsize Employers by Forbes, a Best Place to Work by Glassdoor, a Top Workplace by The Washington Post and a Best Place to Work in Asia by World HRD Congress. www.deltek.com

Business Summary

At Deltek, security isn't a gate at the end of the process — it's in the foundation. Enterprise Security & Technology Services (ESTS) brings together security, infrastructure, and technology operations under one organization, led by our CISO, with a mandate to make sure Deltek builds and operates with integrity at every layer.
We're a passionate team of technologists and security professionals who work across the entire company — embedded in how services are built, delivered, and supported. We run agile, we embrace intelligent automation to amplify what our people can do, and we hold ourselves to a high standard because the organizations that depend on Deltek's platform are doing work that can't afford mistakes. If you take your craft seriously, want visibility into how a complex, global technology organization really operates, and believe security should be a first principle — not an afterthought — this is a team that will feel like home.

Position Responsibilities

• Lead the monitoring and analysis of security alerts and events across multiple platforms and environments.
• Perform advanced investigations of security incidents, including root-cause analysis and remediation planning.
• Develop and refine incident response playbooks and standard operating procedures.
• Conduct threat-hunting activities to proactively identify potential risks and vulnerabilities.
• Collaborate with IT, engineering, and compliance teams to implement security best practices and controls.
• Support vulnerability management processes and help ensure timely remediation of identified issues.
• Automate repetitive tasks to improve the efficiency and consistency of security operations.
• Leverage Generative AI and AI-enabled tools in daily work activities to improve the speed, quality, and consistency of security operations, ensuring all AI use is responsible, secure, and aligned with Deltek’s AI usage, acceptable use, and data-protection policies.
• Stay informed on emerging threats, attack vectors, and security technologies to enhance detection and response capabilities.
• Provide on-call Security Operations support based on assigned shift.
• Perform other duties as assigned.

Qualifications

Required Qualifications

• BA/BS in computer science, information technology, cybersecurity, or a related field; SANS training or equivalent experience.
• 3+ years of experience in information security, including hands-on incident response and SIEM monitoring.
• Practical experience with incident management, including incident handling, malware cleanup, and investigations.
• Strong understanding of operating systems (Windows, Unix/Linux).
• Experience with SIEM monitoring, alert triage, and event correlation.
• Understanding of IPS, SIEMs, and internet protocols, including log analysis and configuration.
• Familiarity with threat-hunting concepts and the MITRE ATT&CK framework.
• Ability to quickly prioritize and correlate multiple unstructured events and incidents.
• Strong analytical, communication, and teamwork skills for a highly collaborative environment.
• Ability to perform on-call/shift work and work after normal business hours as needed.

Preferred Qualifications

• Certifications such as GCIH, GCFA, GMON, Security+, or CySA+.
• Familiarity with Cloud Security Alliance guidance and the SANS/CIS critical security controls.
• Experience with cloud security monitoring across major cloud platforms.
• Experience applying Generative AI and automation to improve security operations.

Key Competencies

• Ownership mentality, with sound judgment and composure under pressure.
• Curiosity, adaptability, and a drive for continuous improvement.
• Strong collaborator across analysts, business units, and cross-functional teams.
• Passion for cybersecurity and for protecting Deltek and its customers.

Applicant Privacy Notice

Deltek is committed to the protection and promotion of your privacy. In connection with your application for employment with us at Deltek, it is necessary for us to collect, store and use information about you (“Personal Data”) to administer and evaluate your application. We are the “controller” of the Personal Data you provide us and will process any such Personal Data in accordance with applicable law and the statements contained in this Employment Candidate Privacy Notice. Additionally, we have not sold and do not sell Personal Data you provide to us through the job application process.