Security Operations Analyst: Incident Response & IAM

OpenKrill; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

Appen is seeking an IT Security Analyst to protect information assets by operating and improving security controls. You will own security operations across Defender, lead incident response, maintain ISO 27001 documentation, and drive identity, access and patch management.

You will monitor Defender XDR and Sentinel alerts, lead end-to-end incidents, and support audits and evidence collection. Strong communication with stakeholders is essential as you implement least-privilege access and

Qualifications

• 1-3 years' experience in a security operations or security analyst role.
• Hands-on experience with Microsoft Defender XDR, Sentinel and Entra ID.
• Experience leading security incidents and producing incident reports.
• Working knowledge of ISO 27001 controls and audit processes.
• Experience with IAM, access reviews, PAM and patch management.
• Proficiency with KQL and PowerShell or Python.
• Strong communication skills with technical and non-technical stakeholders.

Responsibilities

• SOC & Alert Management: Monitor, triage and resolve alerts in Microsoft Defender XDR and Sentinel; tune detections to reduce false positives and improve response times.
• Incident Response: Lead incidents end-to-end (containment, eradication, recovery, lessons learned); maintain the Incident Response Plan and playbooks.
• ISO 27001: Maintain ISMS policies, risk register and audit evidence; support internal and external audits and close findings.
• IAM & Access Reviews: Administer Entra ID (Conditional Access, MFA); run quarterly user and privileged access reviews and enforce least privilege.
• PAM: Operate the Privileged Access Management solution, including PIM and break-glass accounts.
• Patch & Vulnerability Management: Own vulnerability remediation and monthly patch cycles; report compliance against SLAs.
• Cost Optimisation: Manage security licences and Sentinel log ingestion to optimise cost without reducing coverage.

Skills

Security operations

Incident response

ISO 27001 controls

IAM & access reviews

PAM

Patch management

KQL

PowerShell or Python

Communication skills

Tools

Microsoft Defender XDR

Sentinel

Entra ID

Job description

Appen is seeking an IT Security Analyst to protect information assets by operating and improving security controls. You will own security operations across Defender, lead incident response, maintain ISO 27001 documentation, and drive identity, access and patch management.

You will monitor Defender XDR and Sentinel alerts, lead end-to-end incidents, and support audits and evidence collection. Strong communication with stakeholders is essential as you implement least-privilege access and