IT Security Operations Analyst

Stack

Responsibilities

• ▹Monitor Microsoft Defender and Microsoft Sentinel for security alerts, and triage each one (real threat, policy violation, or false positive)
• ▹Conduct a monthly review of user accounts and access rights across AlertMedia's systems, flagging stale, orphaned, or over-permissioned accounts
• ▹Investigate reported phishing emails: trace headers, check URLs and attachments against threat intelligence, determine whether any employee interacted with the message
• ▹Respond to suspected account compromises: contain the affected account, reset credentials, review sign-in and audit logs, document the full timeline
• ▹Triage and remediate other security incident types, escalating complex or high-severity incidents to senior analysts per AlertMedia's incident response playbooks
• ▹Maintain accurate, detailed incident records and investigation notes that hold up to internal review and external audit
• ▹Support annual SOC 2 and ISO 27001 audits by gathering evidence, documenting controls, and responding to auditor requests
• ▹Assist with identity and access management tasks, including provisioning, deprovisioning, and periodic access reviews tied to onboarding/offboarding
• ▹Contribute to and keep current the security playbooks and standard operating procedures used across the team
• ▹Support employee security awareness efforts, including targeted follow-up training after phishing or social engineering incidents
• ▹Create and maintain consistent simulated phishing campaigns

Requirements

• ▹One to two years of experience in IT security, security operations, systems administration, or a related technical role
• ▹Working familiarity with Microsoft Defender (Endpoint, Identity, or Office 365) and Microsoft Sentinel, or comparable SIEM and EDR tools
• ▹A methodical, detail-oriented approach to investigation
• ▹Clear written and verbal communication, able to explain technical findings to both engineers and non-technical stakeholders
• ▹A basic understanding of identity and access management concepts, including least privilege and account lifecycle management

Nice to have

• ▹Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST, including audit evidence collection
• ▹A relevant certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200
• ▹Familiarity with Microsoft 365 administration, Azure Active Directory (Entra ID), or basic KQL queries
• ▹Basic scripting ability in PowerShell for investigation and light automation
• ▹1-2 years experience in security/security operations or 3-5 years experience in system administration

Soft skills

What we offer

• ▹Competitive base salary + company-wide bonus program
• ▹Generous and flexible time off and parental leave policies
• ▹Health benefits - medical, dental, vision, and life insurance 100% paid for employees
• ▹401K with a generous company match
• ▹Team rewards and recognition
• ▹Commitment to community service
• ▹Access to a brand-new downtown office with city views, gym, and nearby running trails
• ▹Ongoing career development opportunities

About the company

AlertMedia, backed by Vista Equity Partners, provides threat intelligence, emergency communication, and travel risk management solutions that help companies identify, respond to, and recover from critical events. It supports over 150 countries and clients such as JetBlue, Coca-Cola Bottling, and Walmart.