Security Analyst

• Monitor and triage alerts across multiple client environments using SIEM, EDR, and other security telemetry • Investigate suspicious activity, contain incidents, and document findings clearly • Tune detections, reduce false positives, and contribute to the playbook library • Perform Tier 2 escalations — phishing, malware, lateral movement, identity compromise • Participate in client-facing meetings: monthly reviews, incident debriefs, security posture conversations • Help shape security strategy recommendations for MSSP clients (controls, hardening, roadmap input) • Stay current on threat actor TTPs, emerging vulnerabilities, and platform updates Requirements 1–2 years of hands‑on SOC analyst experience (Tier1, ideally with some Tier2 exposure) Working knowledge of at least one major EDR platform: CrowdStrikeFalcon, SentinelOne, or MicrosoftDefender for Endpoint Experience with at least one SIEM (MicrosoftSentinel, Splunk, CrowdStrike, SumoLogic, QRadar, Elastic, or similar) Industry certification: CompTIA Security+, CySA+, or equivalent — or willingness to earn within 90days Solid grasp of fundamentals: networking, Windows/Linux internals, MITRE ATT&CK, common attack chains Clear written and verbal communication — you can explain a finding to a non‑technical client Curiosity, ownership, and the drive to grow into a senior contributor Nice to Have: MSP or MSSP experience (multi‑tenant environments, ticket‑driven workflows) Cloud security exposure (Azure, AWS, M365 security stack) Scripting in PowerShell or Python Additional certifications: BTL1, GCIA, GCIH, or MicrosoftSC-200 Experience with phishing analysis, malware triage, or threat hunting #J-18808-Ljbffr