Cyber Defense Operations Analyst — Remote-Friendly

Ballast Services Inc.

Florida

Hybrid

USD 55,000 - 85,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical, Dental, Vision, Life

401k with company match

Hybrid in Tampa + remote options

Time off: Sick, Vacation, Holidays

Job summary

Ballast Services Inc. is seeking a Security Operations Technician to bridge Service Desk, SOC, and Engineering. You will review EDR alerts, investigate incidents, validate remediation, and support patch and vulnerability management across Windows, Linux, and cloud platforms.

The role offers exposure to enterprise environments across industries, with hybrid work options in Tampa and remote flexibility. Ideal for a senior service desk lead transitioning into cybersecurity, you will collaborate

Qualifications

3+ years of experience in IT support, systems administration, or cybersecurity.
Strong knowledge of Windows 10/11 and Windows Server OS.
Experience troubleshooting laptops, desktops, and user issues.
Understanding of Entra ID and Active Directory; DNS; DHCP; Group Policy; Microsoft 365.
Experience supporting server infrastructure.
Ability to analyze logs and troubleshoot technical issues.
Strong written communication and documentation skills.

Responsibilities

Review and triage endpoint detection and response (EDR) alerts and security incidents.
Investigate suspicious and malicious activity on workstations and servers.
Validate threat remediation activities and document findings.
Monitor endpoint security agent health and coverage.
Assist with incident investigations and containment activities.
Escalate confirmed security events to senior security engineers.
Review vulnerability scan results from security platforms.
Validate findings and eliminate false positives.
Research security vulnerabilities and associated business risks.
Track remediation progress and follow up with internal teams and customers.
Assist with monthly vulnerability reporting and customer reviews.
Support vulnerability remediation efforts across Windows, Linux, and cloud environments.
Monitor patch compliance across customer environments.
Investigate failed Windows, Office, and third-party application updates.
Assist with deployment and validation of security patches.
Troubleshoot update-related issues using Windows Update, RMM, and endpoint management tools.
Support monthly patch management cycles and maintenance windows.
Troubleshoot advanced laptop and desktop issues.
Resolve operating system, performance, and application problems.
Diagnose connectivity, authentication, and Microsoft 365 issues.
Support endpoint management and security tooling.
Support Windows Server administration and troubleshooting.
Review event logs and system alerts to identify operational issues.
Support monitoring, backup, and maintenance activities.
Participate in scheduled maintenance windows.
Assist with cloud-based infrastructure in Azure and AWS environments.
Document investigations, findings, and remediation activities.
Create and update operational runbooks and procedures.
Maintain customer asset, vulnerability, and remediation records.
Contribute to process improvement and automation initiatives.