Cyber Security Engineer Level 1

Security Engineer Level 1 is an entry-level role responsible for supporting security operations across corporate and cloud environments. This position focuses on monitoring security alerts, assisting with incident triage, and supporting the implementation and validation of security controls to protect systems and data. The role operates within defined security processes, escalation paths, and governance frameworks while developing foundational skills in threat detection, identity security, vulnerability management, and cloud security.

DUTIES AND RESPONSIBILITIES:

• Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms

• Escalate confirmed or suspected security incidents based on defined response procedures Assist with vulnerability tracking, remediation validation, and reporting activities

• Support identity and access security processes including MFA, access reviews, and account monitoring

• Assist with security control validation across endpoint, Microsoft 365, and cloud environments

• Support audit preparation activities through evidence collection and documentation
  Maintain accurate documentation including runbooks, SOP updates, and ticketing records

• Follow incident response and change control processes with clear documentation of findings and actions

• Participate in security monitoring reviews and operational security tasks as assigned

POSITION QUALIFICATIONS:

• Basic understanding of cybersecurity principles, risks, and threat concepts

• Foundational knowledge of identity and access management (authentication, MFA, access control

• Familiarity with security tools such as SIEM, EDR, or email security platforms
  Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring)

• Ability to follow structured investigation and incident handling procedures
  Familiarity with ticketing systems and documentation practices

• Strong communication skills and ability to collaborate with internal teams
  Comfortable working in a fast-paced, multi-site environment with competing priorities
  Ability to participate in after-hours/on-call support as scheduled

EDUCATION AND/OR EXPERIENCE:

• Associate or Bachelor’s degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience)

• 0–2 years of experience in IT, security operations, or related technical roles
  Internship, lab work, or hands-on security experience acceptable in place of formal experience

• Exposure to cloud platforms, endpoint security, or identity security preferred
  Certifications preferred: CompTIA Security+, Microsoft SC-900, or equivalent fundamentals

PHYSICAL REQUIREMENTS:

• Ability to sit and work at a computer for extended periods.