MetroSys is seeking a dependable and detail-oriented Security Operations Administrator for a short-term contract engagement supporting a client’s security monitoring and response operations. This role is responsible for reviewing, triaging, documenting, and responding to alerts generated across the client’s security platforms and infrastructure environment.
The ideal candidate has hands-on experience with endpoint security, email security, identity-related alerts, and incident response workflows, and can work independently while coordinating with help desk and infrastructure teams as needed.
This role is structured around a daily operational review window (~2 hours per day) while supporting a 24/7 alerting environment.
Key Responsibilities- Review and respond to security alerts and tickets generated from the client’s monitoring and security platforms
- Investigate and triage alerts related to:
- Endpoint security events
- Email threats and phishing activity
- Suspicious authentication attempts
- Firewall and network security events
- Perform incident response activities including:
- Documentation
- Initial remediation actions
- Escalation and coordination
- Post-mortem reporting
- Validate email and phishing-related incidents using:
- Mimecast
- KnowBe4 / PhishER / PhishRip workflows
- Monitor and respond to endpoint alerts within:
- Sophos EDR/XDR
- Sophos Intercept X Advanced
- Investigate identity and authentication alerts from Microsoft environments, including:
- Sign-in risk events
- Suspicious token or authorization activity
- IP/location anomalies
- Support security investigations involving:
- Sophos firewall alerts
- Fortinet networking environments
- MFA and authentication platforms (including YubiKey environments)
- Coordinate with client help desk and infrastructure teams for remediation support and escalation handling
- Maintain accurate documentation of incidents, actions taken, and recommendations
- 3+ years of experience in security administration, SOC operations, or security incident response
- Hands-on experience with:
- Mimecast
- KnowBe4 / phishing remediation workflows
- Sophos EDR/XDR and Intercept X
- Microsoft 365 security and sign-in risk analysis
- Understanding of:
- Security incident response workflows
- Endpoint and network security concepts
- Identity and access management fundamentals
- Experience reviewing and analyzing security alerts and event data
- Strong documentation and communication skills
- Ability to work independently and manage daily operational responsibilities efficiently
Skills Required
- 3+ years experience in security administration, SOC operations, or security incident response
- Hands-on experience with Mimecast
- Hands-on experience with KnowBe4 / PhishER / PhishRip workflows
- Hands-on experience with Sophos EDR/XDR and Sophos Intercept X Advanced
- Hands-on experience with Microsoft 365 security and sign-in risk analysis
- Understanding of security incident response workflows
- Understanding of endpoint and network security concepts
- Understanding of identity and access management fundamentals
- Experience reviewing and analyzing security alerts and event data
- Strong documentation and communication skills
- Ability to work independently and manage daily operational responsibilities
- Experience with Sophos firewall, Fortinet networking environments, and MFA/YubiKey environments
What We Do
MetroSys is a I.T. Professional Services company based in sunny San Diego, CA. Established in 2006, MetroSys has technical talent supporting the Americas. Our Mission Statement; To simplify our customers’ business solutions while having fun with what we do. Our creative geniuses have been pioneering data solutions for our valued customers and partners in the following areas: Data Mobility: Enterprise Storage, Cloud Migrations, Systems Integration & Installation: Storage, Networking, Virtualization, Database, Messaging Flexible Workforce: Recruiting, Staffing, Direct Placement Assessment Services: Storage, Networking, Performance, Periodic, Get Healthy ingenuity. Agility. Speed. These are key ingredients to our success. Navigating the world of I.T. Professional Services can pose many challenges. We help customers, channel partners, resellers & manufacturers deliver! Our team of highly experienced professionals can help bridge any gap for your I.T. requirements. Whether assistance with pre-sales or post-sales services, recruiting, or assisting with the launch of emerging technologies, We CAN Help! Great people. Great Company. MetroSys has carefully crafted its team of highly skilled talent by not only hiring industry experts, but by selecting people that share our view on company culture. Our core values include teamwork, integrity, accountability, & embracing diversity. Our customer first approach builds strong relationships as a trusted advisor and technology partner. Our team integrates with your business and maximizes efficiency. Simply put, we make it easy.
