Remote IT Security Analyst: Defender, IAM & Threat Response

Twoconnect; United States; Remote; USD 95,000 - 130,000; Full time

Benefits offered by this job

Work from home

HMO with 2 dependents

Medical reimbursements

Training programmes

Career development

Job summary

Twoconnect is seeking an IT Security Analyst to protect a Microsoft‑based environment across global operations. You will monitor security, respond to incidents, manage identities, review vulnerabilities, and help implement the Essential Eight alongside ITSM processes.

You will collaborate with internal teams and external providers to investigate threats, coordinate remediation, maintain evidence, and drive continuous improvement of security controls.

Qualifications

• Minimum three years in cyber security operations, incident response, or related IT security role.
• Hands-on experience securing Microsoft enterprise environments and investigating threats.
• Experience with AD/Entra ID, MFA, CA, and access reviews.
• Familiarity with SIEMs and MDR services like Arctic Wolf is highly regarded.
• Knowledge of ITIL-aligned IT service management and Essential Eight controls.

Responsibilities

• Triage and investigate Defender alerts and SOC escalations.
• Coordinate containment, eradication and recovery activities with teams and providers.
• Support endpoint protection, security posture, hardening and EDR tooling.
• Prioritise vulnerabilities and track remediation through closure.
• Record incidents and changes in ITSM system following processes.
• Perform root cause analysis and contribute to playbooks and knowledge base.
• Report on incident response metrics and security progress.

Skills

Incident response

Threat analysis

Active Directory

Entra ID

MFA/ CA policies

PowerShell

KQL

Cloud security

Security monitoring

Vulnerability management

Education

Cyber security or IT related degree

Relevant certifications (CISSP/CompTIA Security+/ equivalent)

Tools

Microsoft Defender

Arctic Wolf SOC

Freshservice

SIEM tooling

Microsoft Entra ID

Defender for Identity

Job description

Twoconnect is seeking an IT Security Analyst to protect a Microsoft‑based environment across global operations. You will monitor security, respond to incidents, manage identities, review vulnerabilities, and help implement the Essential Eight alongside ITSM processes.

You will collaborate with internal teams and external providers to investigate threats, coordinate remediation, maintain evidence, and drive continuous improvement of security controls.