IT Security Operations Analyst

AlertMedia; Austin (TX); On-site; USD 75,000 - 95,000; Full time

Benefits offered by this job

Competitive base salary

Company-wide bonus program

Health benefits (medical, dental, Visi

401K with company match

Learning and development opportunities

Job summary

AlertMedia, a leading security and risk intelligence company, seeks an IT Security Analyst in Austin to join our Information Security team. This hands‑on role focuses on monitoring, incident response, and securing access across the environment.

You will triage alerts in Defender and Sentinel, review user access monthly, and investigate phishing incidents. The role offers growth toward tier two investigations and security engineering.

Qualifications

• 1–2 years of IT security, security operations, or related work.
• Familiarity with Microsoft Defender and Microsoft Sentinel or similar SIEM/EDR tools.
• Methodical, detail‑oriented approach to investigations.
• Clear written and verbal communication; explain findings to engineers and non‑technical stakeholders.
• Basic IAM concepts: least privilege and account lifecycle management.

Responsibilities

• Monitor Defender and Sentinel; triage alerts for real threats, policy violations, or false positives.
• Conduct monthly reviews of user accounts and access rights; flag stale or over‑permitted accounts.
• Investigate phishing emails; trace headers, check links and attachments with threat intel.
• Contain compromised accounts; reset credentials; review logs for unauthorized activity.
• Triage and remediate security incidents; escalate complex cases to senior analysts.
• Maintain detailed incident records for audits.
• Support SOC 2 and ISO 27001 audits by gathering evidence and documenting controls.
• Assist with provisioning/deprovisioning and periodic access reviews.
• Contribute to security playbooks and standard operating procedures.
• Support security awareness training and simulated phishing campaigns.

Skills

Microsoft Defender

Microsoft Sentinel

Investigation

Communication

Identity & Access Mgmt

Security operations

Tools

PowerShell

Azure Active Directory (Entra ID)

KQL queries

Job description

Do work that matters.

Do work that matters. At AlertMedia, we help organizations protect their people, operations, and brand. Our modern Risk Intelligence and Response platform empowers teams to detect emerging threats, assess impact, and respond with confidence. We believe building resilience should be simpler—and it starts with bringing critical information and workflows together in one unified platform.

Our core values drive us in our important mission of keeping people safe & informed:

• We’re humans not robots
• Customers always come first
• We work better together
• Simplicity is our strength
• Our reputation is priceless
• Hard work pays of

AlertMedia is looking for an IT Security Analyst to join our Information Security team. This is a hands‑on, tier one role for someone building a career in security operations. You will monitor our environment for threats, investigate and remediate phishing and account compromise incidents, keep user access clean through a monthly account audit, and support the evidence‑gathering behind our SOC 2 and ISO certifications. You will work daily in Microsoft Defender and Microsoft Sentinel, reporting to the Senior IT Manager.

Who you are:

As an IT Security Analyst, you will be the first line of defense for AlertMedia’s internal security operations. You will triage alerts, run down the details, and either resolve them or hand them off with a clear, complete record. Over time, you will build the pattern recognition and technical depth that lead toward tier two work: deeper investigations, threat hunting, and security engineering.

What you get to do everyday:

• Monitor Microsoft Defender and Microsoft Sentinel for security alerts, and triage each one to determine whether it represents a real threat, a policy violation, or a false positive.
• Conduct a monthly review of user accounts and access rights across AlertMedia’s systems, flagging stale, orphaned, or over‑permissioned accounts for remediation.
• Investigate reported phishing emails: trace headers, check URLs and attachments against threat intelligence, and determine whether any employee interacted with the message before it was reported.
• Respond to suspected account compromises by containing the affected account, resetting credentials, reviewing sign‑in and audit logs for unauthorized activity, and documenting the full timeline.
• Triage and remediate other security incident types, escalating complex or high‑severity incidents to senior analysts according to AlertMedia’s incident response playbooks.
• Maintain accurate, detailed incident records and investigation notes that hold up to internal review and external audit.
• Support annual SOC 2 and ISO 27001 audits by gathering evidence, documenting controls, and responding to auditor requests alongside the security and compliance teams.
• Assist with identity and access management tasks, including provisioning, deprovisioning, and periodic access reviews tied to employee onboarding and offboarding.
• Contribute to and help keep current the security playbooks and standard operating procedures used across the team.
• Support employee security awareness efforts, including targeted follow‑up training after phishing or social engineering incidents.
• Create and maintain consistent simulated phishing campaigns

What you bring to the role:

• One to two years of experience in IT security, security operations, systems administration, or a related technical role
• Working familiarity with Microsoft Defender (Endpoint, Identity, or Office 365) and Microsoft Sentinel, or comparable SIEM and EDR tools.
• A methodical, detail‑oriented approach to investigation
• Clear written and verbal communication; you can explain a technical finding to both an engineer and a non‑technical stakeholder.
• A basic understanding of identity and access management concepts, including least privilege and account lifecycle management.

What sets you apart:

• Exposure to compliance frameworks such as SOC 2, ISO 27001, or NIST, including audit evidence collection preferred.
• A relevant certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200 preferred.
• Familiarity with Microsoft 365 administration, Azure Active Directory (Entra ID), or basic KQL queries.
• Basic scripting ability in PowerShell for investigation and light automation preferred.
• 1-2 years experience in security/security operations or 3-5 years experience in system administration preferred.

Location:

Austin, TX. This is an in‑office position 5 days a week in our beautiful downtown Austin, Texas headquarters.

Sponsorship:

AlertMedia does not sponsor candidates.

Why this role matters:

AlertMedia invests in analysts who want to grow. You will work alongside senior security staff who will mentor you toward tier two responsibilities as you build your skills and take on more complex investigations.

Why you’ll love working at AlertMedia:

• Competitive base salary + Company‑wide bonus program
• Generous and flexible time and parental leave policies
• Health benefits - Medical, Dental, Vision and Life Insurance 100% paid for employees!
• 401K with a generous company match
• Amazing rewards and incentives – we love celebrating each other!
• Commitment to community service with opportunities to give back
• A Best Places to Work company 10 years in a row and numerous other awards
• Access to brand new downtown office with 360 views of Austin, high‑tech building gym, and nearby running trails
• Ongoing career development opportunities with our Learning and Development team

About AlertMedia:

AlertMedia, backed by Vista Equity Partners, helps organizations protect their people and businesses through all phases of an emergency. Our award‑winning threat intelligence, emergency communication, and travel risk management solutions help companies of all sizes identify, respond to, and recover from critical events faster and more confidently. AlertMedia supports essential communication for thousands of leading businesses—including JetBlue, Coca‑Cola Bottling, and Walmart—in more than 150 countries.

We are an equal opportunity employer focused on creating a collaborative and exciting place for all to work. Ensuring a diverse, inclusive, and equitable workplace for all people is key to our success and core to our values.

All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

This is an amazing opportunity to be part of our wave of momentum and take our company, and your career, to the next growth stage. We’d love to get to know you better and share how we serve our amazing customers. For more information, please visit www.alertmedia.com.

AlertMedia does not sponsor.

By applying for the role, you agree that Alert Media will use your Personal Information in connection with the recruitment process and in accordance with our Privacy Policy – https://www.alertmedia.com/legal/privacy-policy/