Job Summary
Defends the organization's systems and data. Monitors for threats, investigates security alerts, and helps harden defenses — responding quickly when something looks wrong and improving protections so it doesn't happen again.
Essential Functions
- Monitor security tools and alerts (SIEM, endpoint protection, email security) and triage potential incidents
- Investigate suspicious activity, determine scope and impact, and coordinate response actions
- Run vulnerability scans, track remediation, and verify fixes with system owners
- Support phishing simulations and security-awareness efforts across the organization
- Maintain incident response documentation, playbooks, and post-incident reviews
- Assist with security audits and compliance evidence gathering
- Stay current on emerging threats and recommend practical defensive improvements
Qualifications
Required:
- 2+ years in cybersecurity, SOC, or IT operations with a security focus
- Working knowledge of networking, operating systems, and common attack techniques
- Experience with security tooling such as SIEM, EDR, or vulnerability scanners
- Calm, methodical judgment under pressure during live incidents
Preferred:
- Security+, CySA+, GSEC, or equivalent certification
- Scripting ability (e.g., Python or PowerShell) for analysis and automation
Education & Certifications
Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience
Pay range example: $100,000–$140,000 per year (adjust to your market and experience)