Security Operations Analyst - Incident Response & IAM

Appen Limited; United States; Teletrabalho; USD 80 000 - 120 000; Tempo integral

Resumo da oferta

Appen Limited is seeking an IT Security Analyst to protect information assets by operating security controls, leading incident response, and maintaining ISO 27001 documentation. You will drive IAM, PAM and patch management across Defender XDR, Sentinel, and Entra ID.

The role emphasizes proactive alert handling, incident reporting, and cost-efficient security operations while collaborating with both technical and non-technical stakeholders.

Qualificações

• 1–3 years in a security operations or security analyst role.
• Hands-on with Microsoft Defender XDR, Sentinel and Entra ID.
• Experience leading security incidents and producing incident reports.
• Working knowledge of ISO 27001 controls and audit processes.
• Experience with IAM, access reviews, PAM and patch management.
• Proficiency with KQL and PowerShell or Python.
• Strong communication with technical and non‑technical stakeholders.

Responsabilidades

• Monitor, triage and resolve alerts in Defender XDR and Sentinel; tune detections to reduce false positives.
• Lead end-to-end incident response; maintain Incident Response Plan and playbooks.
• Maintain ISMS policies, risk register and audit evidence; support internal and external audits.
• Administer IAM access reviews and enforce least privilege.
• Operate PAM including PIM and break-glass accounts.
• Own vulnerability remediation and monthly patch cycles; report compliance against SLAs.
• Manage security licences and Sentinel log ingestion to optimise cost.

Conhecimentos

Security ops

Incident management

ISO 27001

IAM & PAM

PowerShell

KQL

Communication

Ferramentas

Microsoft Defender XDR

Sentinel

Entra ID

Descrição da oferta de emprego

Appen Limited is seeking an IT Security Analyst to protect information assets by operating security controls, leading incident response, and maintaining ISO 27001 documentation. You will drive IAM, PAM and patch management across Defender XDR, Sentinel, and Entra ID.

The role emphasizes proactive alert handling, incident reporting, and cost-efficient security operations while collaborating with both technical and non-technical stakeholders.