Security Operations Analyst

Preferred: a master s degree in a related field; experience in healthcare or another regulated environment; familiarity with HIPAA, HITECH, and healthcare security principles; exposure to Security Operations Center (SOC) operations, incident response, or cyber defense; or experience with ticketing, workflow, or case management platforms. Demonstrated interest in cybersecurity through coursework, internships, research projects, military service, homelab activities, academic competitions, or comparable hands-on experience.

Security Operations Analyst
Duration: 12-month+ project
Location: Hybrid, 1 day / week in Oakland, CA, or Alpharetta, GA.

Position Overview:
The Security Operations Analyst will monitor, investigate, and respond to security events across a customer technology environment. This remote, one-year-plus contract role supports the protection of organizational systems and sensitive information. The role operates primarily during standard business hours and may occasionally participate in a 24/7 on-call rotation, including response during nights, weekends, and holidays when security events occur.

Responsibilities:

• Monitor alerts and events generated by Microsoft Defender Suite and Microsoft Sentinel.
• Perform initial investigation and triage to identify false positives, benign activity, and potential security incidents.
• Escalate validated threats and suspicious activity in accordance with established incident response procedures.
• Document findings, investigation timelines, and response actions in ticketing and case management systems.
• Support investigations involving phishing, malware, ransomware, unauthorized access, insider threats, and other security events.
• Collect and preserve evidence and assist with approved response and containment activities.
• Participate in incident response exercises, tabletop scenarios, and post-incident reviews.
• Assist with vulnerability review, prioritization, tracking, remediation verification, and security control validation.
• Support operational security activities across endpoint, identity, email, cloud, and collaboration platforms.
• Help administer security technologies and tune detections, alert logic, dashboards, and operational workflows.
• Maintain case notes, procedures, playbooks, metrics, reports, and other operational documentation.
• Communicate investigation findings clearly to technical and non-technical stakeholders and collaborate across technology, compliance, and operational teams.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent practical experience.
• Zero to three years of experience in cybersecurity, information technology, systems administration, networking, technical support, or a related discipline.
• Demonstrated interest in cybersecurity through coursework, internships, research projects, military service, homelab activities, academic competitions, or comparable hands-on experience.
• Foundational understanding of incident response, identity and access management, vulnerability management, endpoint security, and threat detection.
• Familiarity with Microsoft Windows operating systems, Microsoft 365 services, and cloud computing concepts.
• Strong analytical, troubleshooting, problem-solving, written communication, and verbal communication skills.
• Ability to manage multiple priorities, maintain attention to detail, learn new technologies, and adapt to evolving security requirements.
• Preferred: a master s degree in a related field; experience in healthcare or another regulated environment; familiarity with HIPAA, HITECH, and healthcare security principles; exposure to Security Operations Center (SOC) operations, incident response, or cyber defense; or experience with ticketing, workflow, or case management platforms.

Tools and Technologies:

• Microsoft Defender Suite
• Microsoft Sentinel
• Microsoft Windows
• Microsoft 365
• Cloud computing platforms and services
• Ticketing, workflow, and case management platforms

Metasys Technologies/NVISH is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identify, national origin, veteran or disability status.