Cyber Security Engineer Level 1

Security Engineer Level 1 is an entry-level role responsible for supporting security operations across corporate and cloud environments. This position focuses on monitoring security alerts, assisting with incident triage, and supporting the implementation and validation of security controls to protect systems and data. The role operates within defined security processes, escalation paths, and governance frameworks while developing foundational skills in threat detection, identity security, vulnerability management, and cloud security.

DUTIES AND RESPONSIBILITIES

• Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms
• Escalate confirmed or suspected security incidents based on defined response procedures Assist with vulnerability tracking, remediation validation, and reporting activities
• Support identity and access security processes including MFA, access reviews, and account monitoring
• Assist with security control validation across endpoint, Microsoft 365, and cloud environments
• Support audit preparation activities through evidence collection and documentation

Maintain accurate documentation including runbooks, SOP updates, and ticketing records

• Follow incident response and change control processes with clear documentation of findings and actions
• Participate in security monitoring reviews and operational security tasks as assigned

POSITION QUALIFICATIONS

• Basic understanding of cybersecurity principles, risks, and threat concepts
• Foundational knowledge of identity and access management (authentication, MFA, access control
• Familiarity with security tools such as SIEM, EDR, or email security platforms

Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring)

• Ability to follow structured investigation and incident handling procedures

Familiarity with ticketing systems and documentation practices

• Strong communication skills and ability to collaborate with internal teams

Comfortable working in a fast-paced, multi-site environment with competing priorities

Ability to participate in after-hours/on-call support as scheduled

EDUCATION AND/OR EXPERIENCE

• Associate or Bachelor’s degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience)
• 0–2 years of experience in IT, security operations, or related technical roles

Internship, lab work, or hands-on security experience acceptable in place of formal experience

• Exposure to cloud platforms, endpoint security, or identity security preferred

Certifications preferred

CompTIA Security+, Microsoft SC-900, or equivalent fundamentals

PHYSICAL REQUIREMENTS

• Ability to sit and work at a computer for extended periods.

#LI-Hybrid

#LI-KB1