IT Security Operations Analyst

AlertMedia is looking for an IT Security Analyst to join our Information Security team. This is a hands-on, tier one role for someone building a career in security operations. You will monitor our environment for threats, investigate and remediate phishing and account compromise incidents, keep user access clean through a monthly account audit, and support the evidence-gathering behind our SOC 2 and ISO certifications. You will work daily in Microsoft Defender and Microsoft Sentinel, reporting to the Senior IT Manager.

Who you are:

As an IT Security Analyst, you will be the first line of defense for AlertMedia’s internal security operations. You will triage alerts, run down the details, and either resolve them or hand them off with a clear, complete record. Over time, you will build the pattern recognition and technical depth that lead toward tier two work: deeper investigations, threat hunting, and security engineering.

What you get to do everyday:

• Monitor Microsoft Defender and Microsoft Sentinel for security alerts, and triage each one to determine whether it represents a real threat, a policy violation, or a false positive.
• Conduct a monthly review of user accounts and access rights across AlertMedia’s systems, flagging stale, orphaned, or over-permissioned accounts for remediation.
• Investigate reported phishing emails: trace headers, check URLs and attachments against threat intelligence, and determine whether any employee interacted with the message before it was reported.
• Respond to suspected account compromises by containing the affected account, resetting credentials, reviewing sign-in and audit logs for unauthorized activity, and documenting the full timeline.
• Triage and remediate other security incident types, escalating complex or high-severity incidents to senior analysts according to AlertMedia’s incident response playbooks.
• Maintain accurate, detailed incident records and investigation notes that hold up to internal review and external audit.
• Support annual SOC 2 and ISO 27001 audits by gathering evidence, documenting controls, and responding to auditor requests alongside the security and compliance teams.
• Assist with identity and access management tasks, including provisioning, deprovisioning, and periodic access reviews tied to employee onboarding and offboarding.
• Contribute to and help keep current the security playbooks and standard operating procedures used across the team.
• Support employee security awareness efforts, including targeted follow-up training after phishing or social engineering incidents.
• Create and maintain consistent simulated phishing campaigns

What you bring to the role:

• One to two years of experience in IT security, security operations, systems administration, or a related technical role
• Working familiarity with Microsoft Defender (Endpoint, Identity, or Office 365) and Microsoft Sentinel, or comparable SIEM and EDR tools.
• A methodical, detail-oriented approach to investigation 
• Clear written and verbal communication; you can explain a technical finding to both an engineer and a non-technical stakeholder.
• A basic understanding of identity and access management concepts, including least privilege and account lifecycle management.

What sets you apart:

• Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST, including audit evidence collection.
• A relevant certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200 
• Familiarity with Microsoft 365 administration, Azure Active Directory (Entra ID), or basic KQL queries.
• Basic scripting ability in PowerShell for investigation and light automation.
• 1-2 years experience in security/security operations or 3-5 years experience in system administration

Why this role matters:

AlertMedia invests in analysts who want to grow. You will work alongside senior security staff who will mentor you toward tier two responsibilities as you build your skills and take on more complex investigations.

Why you’ll love working at AlertMedia: