Job description

Security Engineer Level 1 is an entry-level role responsible for supporting security operations across corporate and cloud environments. This position focuses on monitoring security alerts, assisting with incident triage, and supporting the implementation and validation of security controls to protect systems and data. The role operates within defined security processes, escalation paths, and governance frameworks while developing foundational skills in threat detection, identity security, vulnerability management, and cloud security. DUTIES AND RESPONSIBILITIES: • Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms • Escalate confirmed or suspected security incidents based on defined response procedures Assist with vulnerability tracking, remediation validation, and reporting activities • Support identity and access security processes including MFA, access reviews, and account monitoring • Assist with security control validation across endpoint, Microsoft 365, and cloud environments • Support audit preparation activities through evidence collection and documentation Maintain accurate documentation including runbooks, SOP updates, and ticketing records • Follow incident response and change control processes with clear documentation of findings and actions • Participate in security monitoring reviews and operational security tasks as assigned POSITION QUALIFICATIONS: • Basic understanding of cybersecurity principles, risks, and threat concepts • Foundational knowledge of identity and access management (authentication, MFA, access control • Familiarity with security tools such as SIEM, EDR, or email security platforms Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring) • Ability to follow structured investigation and incident handling procedures Familiarity with ticketing systems and documentation practices • Strong communication skills and ability to collaborate with internal teams Comfortable working in a fast-paced, multi-site environment with competing priorities Ability to participate in after-hours/on-call support as scheduled EDUCATION AND/OR EXPERIENCE: • Associate or Bachelor’s degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience) • 0–2 years of experience in IT, security operations, or related technical roles Internship, lab work, or hands-on security experience acceptable in place of formal experience • Exposure to cloud platforms, endpoint security, or identity security preferred Certifications preferred: CompTIA Security+, Microsoft SC-900, or equivalent fundamentals PHYSICAL REQUIREMENTS: • Ability to sit and work at a computer for extended periods. #LI-Hybrid #LI-KB1

Requirements

Must-haves

Monitor and triage Tier 1 security alerts across SIEM, EDR, identity, and cloud security platforms
Escalate confirmed or suspected security incidents based on defined response procedures Assist with vulnerability tracking, remediation validation, and reporting activities
Support identity and access security processes including MFA, access reviews, and account monitoring
Assist with security control validation across endpoint, Microsoft 365, and cloud environments
Support audit preparation activities through evidence collection and documentation
Maintain accurate documentation including runbooks, SOP updates, and ticketing records
Follow incident response and change control processes with clear documentation of findings and actions
Participate in security monitoring reviews and operational security tasks as assigned
Basic understanding of cybersecurity principles, risks, and threat concepts
Foundational knowledge of identity and access management (authentication, MFA, access control
Familiarity with security tools such as SIEM, EDR, or email security platforms
Basic understanding of Microsoft 365 and cloud security concepts (logging, identity, monitoring)
Ability to follow structured investigation and incident handling procedures
Familiarity with ticketing systems and documentation practices
Strong communication skills and ability to collaborate with internal teams
Comfortable working in a fast-paced, multi-site environment with competing priorities
Ability to participate in after-hours/on-call support as scheduled
0–2 years of experience in IT, security operations, or related technical roles
Internship, lab work, or hands-on security experience acceptable in place of formal experience
Ability to sit and work at a computer for extended periods.

Nice-to-haves

Associate or Bachelor’s degree in Information Technology, Cybersecurity, or related field preferred (or equivalent experience)
Exposure to cloud platforms, endpoint security, or identity security preferred
Certifications preferred: CompTIA Security+, Microsoft SC-900, or equivalent fundamentals

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: ukg
Effort: medium