Job Description
Key Responsibilities/ Duties:
Monitor security events and alerts using advanced managed detection and response tools, analyzing potential threats, and initiating incident response procedures.
Triage and review security ticket details to ensure issues are handled efficiently.
Notify customer of relevant incoming tickets and any issues that will prevent workflow.
Handle customer requests including security configurations, reporting requests, investigations, and all error/issue identification.
Promptly forward complex and/or major incidents to Tier 2 analysts, providing clear documentation and context to minimize response times.
Maintain accurate records of triage activities, generate shift reports, and contribute to incident summaries, ensuring traceability for compliance audits.
Provide support for managed detection and response (MDR) and other agent-based solutions.
Provide troubleshooting of security applications and appliances.
Participate in team briefings to ensure seamless knowledge transfer.
Perform other duties as assigned including work in other areas to cover absences or relief to equalize peak work periods or otherwise balance the workload.
Knowledge, Skills, Abilities, and Behaviors:
Strong interpersonal skills and team-oriented attitude.
Coachable and able to turn feedback into results.
Strong desire to be in the security industry.
Ability to apply cybersecurity and privacy principles to organizational requirements.
Ability to apply techniques for detecting intrusions.
Ability to interpret information collected by security tools.
Superior analytical and critical thinking skills.
Understanding of how information travels.
Superior organization, facilitation, and leadership skills.
Flexibility to work in a dynamic, fast-paced environment.
Customer service skills.
Familiar with proxy and web content filtering tools.
Education/ Experience:
Basic programming skills are a plus.
1-3 years of security industry experience or equivalent skill level.
Bachelor’s degree in a relevant field is a plus but not required.
Familiar with scripting languages such as bash, powershell, python, KQL preferred but not required.
Well-rounded technical knowledge in Windows, Mac, Linux OS.
Experience system administration and/or network infrastructure is a plus.
Certifications:
Security+, Network+, CySA+, ISC2 SSCP
Physical Demands:
Sedentary Work – Exerts up to 10 pounds of force occasionally, a negligible amount of force frequently, and/or constantly having to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time.
Disclaimer:
The above information in this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employees assigned to this job.
Job Tags
Shift work