Job Description

• Monitor and triage alerts across our managed detection stack — EDR, NDR, SIEM, SASE, identity, and email security telemetry
• Investigate suspicious activity using our tiered enrichment playbook (search context, pivot on indicators, correlate across data sources)
• Decide TP / FP / Benign with documented evidence, and apply the right severity
• Escalate confirmed incidents to L2 and IR with a clean handoff — what was seen, what was checked, what's next
• Document everything — your triage notes get reviewed by senior analysts, customers, and auditors
• Hand off your shift cleanly to the next analyst with a structured handover brief
• Learn continuously — vendor training, internal labs, and weekly playbook walkthroughs are part of the role

Minimum Qualifications

• 0-2 years of any IT, networking, or security ex...