Cyber Defense Analyst (Tier 1) - Afternoon

Role overview Monitor security alerts across customer environments and provide an initial response, assessing which events may indicate real threats. This remote Tier 1 security operations role involves investigating alerts, documenting evidence, escalating concerns, and coordinating with teammates to maintain continuous coverage. The schedule is in the afternoon.

Responsibilities - Review alerts using customer security tools and assess their severity and potential impact. - Follow established procedures for common alerts, perform basic analysis of indicators such as IP addresses, domains, and file hashes, and take approved initial containment steps. - Record investigation steps, timestamps, and evidence in case management tools for review and follow-up. - Escalate suspected or confirmed threats with clear, actionable reports and handle customer requests appropriately. - Prepare shift handovers that identify open investigations and other operational priorities. - Keep shared procedures and knowledge current, and build awareness of emerging threats through briefings and ongoing learning.

Requirements - At least one entry-level cybersecurity certification, such as Security+ or ISC2 Certified in Cybersecurity, or equivalent. - Strong analytical skills, care with evidence and documentation, and clear written communication. - Ability to collaborate across a shift, follow runbooks, and remain composed during active incidents. - Familiarity with case management and collaboration tools for tracking investigations. - Willingness to keep current with security threats and develop blue team analysis skills.

Nice to have - Two or more years in a security operations center, incident response, or security monitoring. - Experience with Sentinel or Microsoft security tools, cloud monitoring, SIEM/EDR tuning, or detection development. - Scripting or query skills in Python, PowerShell, KQL, or Bash; client-facing work or SOC improvement experience. - Intermediate security certifications such as CySA+, GCIH, or equivalent.

Benefits and work setup Remote role. Listed salary range is $64,000–$128,000, based on qualifications and experience. Benefits include medical, dental, vision, retirement savings, paid time off, and holidays.