Security Engineer Level 1 is an entry-level role responsible for supporting security operations across corporate and cloud environments. This position focuses on monitoring security alerts, assisting with incident triage, and supporting the implementation and validation of security controls to protect systems and data. The role operates within defined security processes, escalation paths, and governance frameworks while developing foundational skills in threat detection, identity security, vulnerability management, and cloud security.
DUTIES AND RESPONSIBILITIES:
- Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms
- Escalate confirmed or suspected security incidents based on defined response procedures Assist with vulnerability tracking, remediation validation, and reporting activities
- Support identity and access security processes including MFA, access reviews, and account monitoring
- Assist with security control validation across endpoint, Microsoft 365, and cloud environments
- Support audit preparation activities through evidence collection and documentation
Maintain accurate documentation including runbooks, SOP updates, and ticketing records
- Follow incident response and change control processes with clear documentation of findings and actions
- Participate in security monitoring reviews and operational security tasks as assigned
POSITION QUALIFICATIONS:
- Basic understanding of cybersecurity principles, risks, and threat concepts
- Foundational knowledge of identity and access management (authentication, MFA, access control
- Familiarity with security tools such as SIEM, EDR, or email security platforms
Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring)
- Ability to follow structured investigation and incident handling procedures
Familiarity with ticketing systems and documentation practices
- Strong communication skills and ability to collaborate with internal teams
Comfortable working in a fast-paced, multi-site environment with competing priorities
Ability to participate in after-hours/on-call support as scheduled
EDUCATION AND/OR EXPERIENCE:
- Associate or Bachelor's degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience)
- 0-2 years of experience in IT, security operations, or related technical roles
Internship, lab work, or hands-on security experience acceptable in place of formal experience
- Exposure to cloud platforms, endpoint security, or identity security preferred
Certifications preferred: CompTIA Security+, Microsoft SC-900, or equivalent fundamentals
PHYSICAL REQUIREMENTS:
- Ability to sit and work at a computer for extended periods.
#LI-Hybrid
#LI-KB1