Cyber Security Engineer Level 1

About the Role

An entry-level role responsible for supporting security operations across corporate and cloud environments. This position focuses on monitoring security alerts, assisting with incident triage, and supporting the implementation and validation of security controls to protect systems and data. The role operates within defined security processes, escalation paths, and governance frameworks while developing foundational skills in threat detection, identity security, vulnerability management, and cloud security.

Key Responsibilities

• Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms
• Escalate confirmed or suspected security incidents based on defined response procedures
• Assist with vulnerability tracking, remediation validation, and reporting activities
• Support identity and access security processes including MFA, access reviews, and account monitoring
• Assist with security control validation across endpoint, Microsoft 365, and cloud environments
• Support audit preparation activities through evidence collection and documentation
• Maintain accurate documentation including runbooks, SOP updates, and ticketing records
• Follow incident response and change control processes with clear documentation of findings and actions
• Participate in security monitoring reviews and operational security tasks as assigned

Requirements & Tech Stack

• Basic understanding of cybersecurity principles, risks, and threat concepts
• Foundational knowledge of identity and access management (authentication, MFA, access control)
• Familiarity with security tools such as SIEM, EDR, or email security platforms
• Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring)
• Ability to follow structured investigation and incident handling procedures
• Familiarity with ticketing systems and documentation practices
• Strong communication skills and ability to collaborate with internal teams
• Comfortable working in a fast-paced, multi-site environment with competing priorities
• Ability to participate in after-hours/on-call support as scheduled

Qualifications

• Associate or Bachelor’s degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience)
• 0–2 years of experience in IT, security operations, or related technical roles
• Internship, lab work, or hands-on security experience acceptable in place of formal experience
• Exposure to cloud platforms, endpoint security, or identity security preferred
• Certifications preferred: CompTIA Security+, Microsoft SC-900, or equivalent fundamentals

Physical Requirements

• Ability to sit and work at a computer for extended periods.