Security Operations Analyst: Cloud & Identity Defender

Vee Healthtek; Salem (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

Vee Healthtek in Salem, VA seeks a Security Operations Analyst to monitor and triage security alerts, investigate phishing and malware incidents, and coordinate with SOC and IT teams. You will manage Microsoft 365 security, Azure Entra, MFA, and endpoint protection using Trend Micro Vision One and Intune.

Strong written communication and incident RCA skills are essential, as you will document SOPs, runbooks, and support audits while maintaining compliance standards.

Qualifications

• Microsoft 365 security and compliance administration.
• Exchange Online, Teams, and DLP, Anti-phishing, Safe Links, Safe Attachments.
• Azure Entra ID, Conditional Access, MFA, Identity Protection.
• SIEM operations and alert triage, preferably FortiSIEM.
• Endpoint security operations with Trend Micro Vision One.
• Device management with Intune and Endpoint Central.
• Incident response, phishing investigation, email header analysis.
• Log analysis, KQL or SIEM query basics, IOC enrichment.
• Policy writing, SOP documentation, and audit evidence handling.
• Strong stakeholder communication and clear RCA writing.

Responsibilities

• Monitor and triage security alerts in SIEM and related tools
• Investigate phishing, malware, and account compromise incidents
• Monitor Microsoft 365 security, Exchange Online, Teams, and Compliance features
• Monitor Azure Entra ID, Conditional Access, MFA, and identity hygiene
• Operate endpoint security with Trend Micro Vision One and ManageEngine Endpoint Central
• Monitor Microsoft Intune for device compliance and configuration
• Coordinate with SOC, IT Ops, and Compliance on containment and recovery
• Maintain policies, SOPs, and incident runbooks
• Track vulnerabilities and remediation with IT teams
• Prepare weekly dashboards and RCA for major incidents
• Support audits and evidence collection

Skills

MS 365 security

Exchange Online

Teams

DLP / Anti-phishing

Safe Links

Safe Attachments

Azure Entra ID

Conditional Access

MFA

Identity Protection

SIEM operations

FortiSIEM (preferred)

Trend Micro Vision One

Endpoint Central

Intune

Incident response

Email header analysis

Log analysis

KQL basics

SOP documentation

Audit evidence handling

Stakeholder communication

RCA writing

Job description

Vee Healthtek in Salem, VA seeks a Security Operations Analyst to monitor and triage security alerts, investigate phishing and malware incidents, and coordinate with SOC and IT teams. You will manage Microsoft 365 security, Azure Entra, MFA, and endpoint protection using Trend Micro Vision One and Intune.

Strong written communication and incident RCA skills are essential, as you will document SOPs, runbooks, and support audits while maintaining compliance standards.