Security Operations Analyst: 2-Hour Daily Review Window

MetroSys, Inc.; United States; Remote; USD 55,000 - 83,000; Part time

Job summary

MetroSys, Inc. seeks a dependable Security Operations Administrator for a short-term contract to support security monitoring and response.

You will review, triage, document, and respond to alerts across client platforms, coordinating with help desk and infrastructure teams as needed. The ideal candidate has hands-on experience with endpoint and email security, identity-related alerts, and incident response workflows, and can work independently within a 24/7 alerting environment with a daily

Qualifications

• 3+ years of experience in security administration, SOC operations, or security incident response.
• Hands-on experience with Mimecast, KnowBe4 / phishing remediation workflows, Sophos EDR/XDR and Intercept X.
• Understanding of security incident response workflows, endpoint and network security concepts, identity and access management fundamentals.
• Experience reviewing and analyzing security alerts and event data.
• Strong documentation and communication skills.
• Ability to work independently and manage daily operational responsibilities efficiently.

Responsibilities

• Review and respond to security alerts and tickets generated from the client’s monitoring and security platforms.
• Investigate and triage alerts related to endpoint security events, email threats, phishing activity, suspicious authentication attempts, and firewall/network security events.
• Perform incident response activities including documentation, initial remediation actions, escalation, coordination, and post-mortem reporting.
• Validate email and phishing-related incidents using Mimecast and KnowBe4 / PhishER / PhishRip workflows.
• Monitor and respond to endpoint alerts within Sophos EDR/XDR and Sophos Intercept X Advanced.
• Investigate identity and authentication alerts from Microsoft environments (sign-in risk, suspicious token, IP/location anomalies).
• Support security investigations involving Sophos firewall alerts, Fortinet environments, MFA and YubiKey platforms.
• Coordinate with client help desk and infrastructure teams for remediation support and escalation handling.
• Maintain accurate documentation of incidents, actions taken, and recommendations.

Skills

Security operations

Incident response

Documentation

Tools

Mimecast

KnowBe4

PhishER

PhishRip

Sophos EDR/XDR

Intercept X

Microsoft 365 security

Job description

MetroSys, Inc. seeks a dependable Security Operations Administrator for a short-term contract to support security monitoring and response.

You will review, triage, document, and respond to alerts across client platforms, coordinating with help desk and infrastructure teams as needed. The ideal candidate has hands-on experience with endpoint and email security, identity-related alerts, and incident response workflows, and can work independently within a 24/7 alerting environment with a daily