IT Security Operations Analyst

As an IT Security Analyst, you will be the first line of defense for AlertMedia’s internal security operations. You will triage alerts, run down the details, and either resolve them or hand them off with a clear, complete record. Over time, you will build the pattern recognition and technical depth that lead toward tier two work: deeper investigations, threat hunting, and security engineering.

• →Monitor Microsoft Defender and Microsoft Sentinel for security alerts, and triage each one to determine whether it represents a real threat, a policy violation, or a false positive.
• →Conduct a monthly review of user accounts and access rights across AlertMedia’s systems, flagging stale, orphaned, or over-permissioned accounts for remediation.
• →Investigate reported phishing emails: trace headers, check URLs and attachments against threat intelligence, and determine whether any employee interacted with the message before it was reported.
• →Respond to suspected account compromises by containing the affected account, resetting credentials, reviewing sign-in and audit logs for unauthorized activity, and documenting the full timeline.
• →Triage and remediate other security incident types, escalating complex or high-severity incidents to senior analysts according to AlertMedia’s incident response playbooks.
• →Maintain accurate, detailed incident records and investigation notes that hold up to internal review and external audit.
• →Support annual SOC 2 and ISO 27001 audits by gathering evidence, documenting controls, and responding to auditor requests alongside the security and compliance teams.
• →Assist with identity and access management tasks, including provisioning, deprovisioning, and periodic access reviews tied to employee onboarding and offboarding.
• →Contribute to and help keep current the security playbooks and standard operating procedures used across the team.
• →Support employee security awareness efforts, including targeted follow-up training after phishing or social engineering incidents.
• →Create and maintain consistent simulated phishing campaigns

• One to two years of experience in IT security, security operations, systems administration, or a related technical role
• Working familiarity with Microsoft Defender (Endpoint, Identity, or Office 365) and Microsoft Sentinel, or comparable SIEM and EDR tools.
• A methodical, detail-oriented approach to investigation 
• Clear written and verbal communication; you can explain a technical finding to both an engineer and a non-technical stakeholder.
• A basic understanding of identity and access management concepts, including least privilege and account lifecycle management.

• Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST, including audit evidence collection.
• A relevant certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200 
• Familiarity with Microsoft 365 administration, Azure Active Directory (Entra ID), or basic KQL queries.
• Basic scripting ability in PowerShell for investigation and light automation.
• 1-2 years experience in security/security operations or 3-5 years experience in system administration

AlertMedia invests in analysts who want to grow. You will work alongside senior security staff who will mentor you toward tier two responsibilities as you build your skills and take on more complex investigations.

Why you’ll love working at AlertMedia:  

• Competitive base salary + Company-wide bonus program  
• Generous and flexible time and parental leave policies  
• Health benefits - Medical, Dental, Vision and Life Insurance 100% paid for employees!  
• 401K with a generous company match 
• Amazing rewards and incentives – we love celebrating each other!  
• Commitment to community service with opportunities to give back   
• A Best Places to Work company 10 years in a row and numerous other awards  
• Access to brand new downtown office with 360 views of Austin, high-tech building gym, and nearby running trails  
• Ongoing career development opportunities with our Learning and Development team 

Location: Austin, TX. This is an in-office position 5 days a week in our beautiful downtown Austin, Texas headquarters.

Sponsorship: AlertMedia does not sponsor candidates.

About AlertMedia:   

AlertMedia, backed by Vista Equity Partners, helps organizations protect their people and businesses through all phases of an emergency. Our award-winning threat intelligence, emergency communication, and travel risk management solutions help companies of all sizes identify, respond to, and recover from critical events faster and more confidently. AlertMedia supports essential communication for thousands of leading businesses—including JetBlue, Coca-Cola Bottling, and Walmart—in more than 150 countries.  

We are an equal opportunity employer focused on creating a collaborative and exciting place for all to work. Ensuring a diverse, inclusive, and equitable workplace for all people is key to our success and core to our values.   All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.    

This is an amazing opportunity to be part of our wave of momentum and take our company, and your career, to the next growth stage. We'd love to get to know you better and share how we serve our amazing customers. For more information, please visit www.alertmedia.com.      

AlertMedia does not sponsor.   

By applying for the role, you agree that Alert Media will use your Personal Information in connection with the recruitment process and in accordance with our Privacy Policy – https://www.alertmedia.com/legal/privacy-policy/