What is your mission?

• Monitor security tools and SIEM alerts to identify and respond to potential threats
• Create, update, and manage security tickets in enterprise ticketing systems
• Respond to customers regarding security events and incident updates
• Escalate critical security incidents to higher-level teams as required
• Perform first-level alert triage and initial incident assessment
• Support phishing investigations and related security inquiries
• Maintain accurate and detailed ticket documentation and incident logs
• Operate within a 24/7 security monitoring environment, including after-hours alerts and escalations

Who are we looking for?

• Bachelor’s degree in Information Technology, Computer Science, or a related field is preferred
• 2–3 years of hands-on experience in security operations, SIEM monitoring, or related roles
• Must have CompTIA Security+ certification
• Experience with SIEM platforms, alert review, log analysis, and security ticket workflows
• Exposure to at least one endpoint or security tool such as SentinelOne, Webroot, Cylance, or DNS filtering tools
• Solid understanding of TCP/IP, ports and protocols, and basic security concepts (defense in depth)
• Basic PowerShell scripting skills
• Experience using an enterprise ticketing system
• Comfortable handling after-hours alerts, escalations, and on-call rotations
• Background in SOC or MSSP environments is an advantage
• Additional certifications such as Network+ or A+ are a plus
• Excellent English communication skills for clear customer interaction
• Strong incident handling, documentation, and escalation skills
• Ability to work calmly under pressure with a methodical approach
• High energy, coachability, and willingness to grow within a security operations team