indeed
Security Operations Analyst
Mastery Logistics Systems, Inc.
Atlanta, USA
Full-time
Entry
Onsite
Discovered 2 weeks ago
Security alert monitoring and triageSecurity investigationsMicrosoft SentinelSIEM platformsAzureMITRE ATT&CK
Role Overview
Monitor, triage, and investigate security alerts across the enterprise and Azure-native infrastructure.
Work with the Security Operations Engineer and Team Lead to protect the MasterMind transportation management platform and supporting infrastructure.
Key Skills for This Role
Security alert monitoring and triageSecurity investigationsMicrosoft SentinelSIEM platformsAzureMITRE ATT&CK
Full Job Posting
About the role
Monitor, triage, and investigate security alerts across the enterprise and Azure-native infrastructure.
Work with the Security Operations Engineer and Team Lead to protect the MasterMind transportation management platform and supporting infrastructure.
Alert triage and investigation
- Work alerts in Microsoft Sentinel and Azure, distinguishing real threats from noise.
- Follow documented triage and escalation procedures; take containment or remediation action when appropriate.
- Write clear investigation notes that teammates, auditors, or customers can follow.
Threat awareness and team contribution
- Use Cyber Kill Chain and MITRE ATT&CK concepts to recognize patterns and interpret alerts.
- Escalate significant threats with useful context to the Security Operations Engineer or Team Lead.
- Flag false positives, missed detections, and visibility gaps to the team tuning detection rules.
- Take on stretch assignments in basic scripting, log analysis, and evidence collection; grow into more complex investigations.
Experience and technical qualifications
- At least 2 years of experience in security operations, IT, or a related alert-driven, shift-based role.
- Hands-on work or coursework familiarity with SIEM platforms such as Microsoft Sentinel or comparable tools.
- Working knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.
Skills and approach
- Communicate technical findings clearly to teammates and non-technical stakeholders.
- Stay methodical under pressure, including when alert queues are busy or immediate action is needed.
- Be eager to learn, receptive to feedback, and coachable.
Nice to have
- Basic exposure to Python or PowerShell scripting.
- Security+, SC-200, or a comparable entry-level certification.
- Exposure to Azure or another major cloud platform.
- Experience with case-management or ticketing tools such as Jira.
Success measures
- Triage alerts accurately and promptly, distinguishing genuine threats from false positives.
- Leave investigation notes that allow another team member, auditor, or Team Lead to continue the work.
- Take on more complex investigations over time and provide useful detection-tuning feedback.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career