Cybersecurity Technician

Description

Job Description

Company Overview

Preferred Business Systems has been serving the office automation and IT support needs of the regional business community since 1997. We pride ourselves on delivering high-quality service, innovative solutions, and comprehensive cybersecurity support to ensure our clients’ operational efficiency and security.

Position Summary

We are seeking a Cybersecurity Technician I to join our security team. This is a hands-on, entry-level security role built for someone coming out of a helpdesk or IT support position who wants to move into cybersecurity full-time.

You will spend your day monitoring client environments for threats, analyzing logs and alerts, running vulnerability scans, and building the security reports our clients rely on. You will work alongside experienced security staff who will review your work, and you will have direct exposure to incident response and compliance projects as you develop.

Key Responsibilities

Threat Detection and Monitoring (primary focus)

• Monitor client systems, networks, and security tools (SIEM, IDS/IPS, endpoint protection) for suspicious activity.
• Perform log analysis to identify indicators of compromise (IoCs).
• Follow established playbooks and runbooks for common alert types.
• Maintain awareness of emerging threats, vulnerabilities, and attack techniques.

Vulnerability Management

• Run scheduled vulnerability scans across client environments.
• Review and validate scan results, filtering false positives.
• Document findings and recommended remediation steps for review by senior staff.
• Track remediation progress and follow up on outstanding items.

Security Reporting

• Generate and maintain recurring security reports, including incident trends and threat summaries.
• Keep documentation of client security configurations accurate and current.

Incident Response Support

• Perform initial triage on security alerts and escalated according to established procedures.
• Assist senior analysts and the SOC with containment actions and evidence gathering.
• Document incident timelines and actions taken.

Compliance Support

• Assist senior staff with evidence collection and documentation for client audits.
• Help maintain compliance checklists and tracking for frameworks such as HIPAA and PCI-DSS.
• Learn the requirements of the regulatory frameworks our clients operate under.

Collaboration and Communication

• Coordinate with internal networking, helpdesk, and systems teams to keep security consistent across client environments.
• Provide clear written updates on findings and ticket status.
• Participate in client conversations alongside senior team members, building toward independent client communication over time.
• Support customer onboarding by implementing security services under the direction of the Cybersecurity Manager.

Requirements

Required — Experience

• At least 3 years in IT support, helpdesk, NOC, or a similar technical role, with meaningful exposure to security tools or tasks.
• Comfortable working in Windows environments; general familiarity with Linux and macOS.
• Experience working tickets in a queue and documenting your work.

Required — Certifications

• CompTIA Security+ — current, or obtained within 90 days of hire.

Required — Foundational Knowledge

• Understanding of core security concepts: the CIA triad, encryption basics, authentication, and common attack types (phishing, malware, credential theft).
• Understanding of networking fundamentals: TCP/IP, DNS, firewalls, VPNs.
• Awareness of what SIEM, IDS/IPS, and endpoint detection tools do and why they matter. Hands-on production experience is not required — we will train you.

Required — Professional Skills

• Strong attention to detail. Much of this work is noticing the one thing in a log that does not belong.
• Clear written communication and disciplined documentation habits.
• Ability to follow established procedures consistently and to ask for help before guessing.
• Ability to juggle work across multiple client environments and prioritize by urgency.
• Reliable on-site attendance.

Preferred

• Prior experience at a Managed Service Provider (MSP) or MSSP.
• Hands-on time with any SIEM platform, vulnerability scanner, or EDR tool.
• Exposure to Microsoft 365 security features or Azure/AWS fundamentals.
• CompTIA Network+, CySA+, or similar coursework in progress.
• Any experience supporting clients in regulated industries.