Review and respond to security alerts and tickets generated from the client’s monitoring and security platforms
Investigate and triage alerts related to endpoint security, email threats, suspicious authentication attempts, and network security events
Perform incident response activities including documentation, remediation actions, and escalation handling
Validate email and phishing-related incidents using Mimecast and other workflows
Monitor endpoint alerts and investigate identity/authentication alerts from Microsoft environments
Support security investigations involving firewall alerts and authentication platforms

3+ years of experience in security administration, SOC operations, or security incident response
Hands-on experience with Mimecast, KnowBe4, Sophos EDR/XDR, Microsoft 365 security
Understanding of security incident response workflows and endpoint/network security concepts
Strong documentation and communication skills
Ability to work independently and manage daily operational responsibilities efficiently

Security Operations Administrator

Key skills