Security Operations & Incident Response Analyst

Avis Systems; Minneapolis, Eden Prairie (MN, MN); On-site; USD 90,000 - 130,000; Full time

Job summary

Forté seeks a security-focused professional to provide Tier 2 support for employees and IT staff. You will monitor alerts from MDR/IDS/EDR, investigate incidents, and improve email/web security controls, while coordinating vulnerability remediation and policy updates across the organization.

You will also support MFA, access reviews, training, and awareness campaigns, partnering with stakeholders to balance risk with operational needs and ensure robust security posture.

Qualifications

• Experience with Secure Email Gateways, Secure Web Gateways, EDR, and SIEM tools.
• Experience with Security Awareness Training and Privileged Access technologies.
• Experience with Microsoft Defender.
• Hands on experience administering and monitoring Microsoft Defender XDR and related Microsoft security products to identify, investigate, and remediate security threats across endpoints, identities, email, and cloud workloads
• Experience with vulnerability scanning.
• Knowledge of CIS and NIST frameworks.
• Experience administering Microsoft and Cisco Systems.
• Understanding of networking fundamentals including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP.
• Ability to explain complex concepts in simple terms.
• Certifications such as CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA are preferred but not required.

Responsibilities

• Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email security platforms.
• Investigate and remediate phishing, malware, and security incidents.
• Maintain and improve secure email and web gateway controls.
• Provide Tier 2 security escalation support and incident resolution.
• Review vulnerability scans and penetration test results.
• Coordinate remediation and patching with Systems Administrators.
• Participate in the organization’s vulnerability management program.
• Maintain awareness of emerging threats and vulnerabilities.
• Support MFA and zero trust identity solutions.
• Assist with password management tools and access reviews.
• Perform quarterly terminated user audits and annual access reviews.
• Secure shared and privileged account credentials.
• Deliver security awareness campaigns and new hire training.
• Educate employees on security best practices and emerging threats.
• Participate in IT and cross functional security projects.
• Ensure compliance with organizational policies and standards.
• Recommend updates to security policies, procedures, and controls.
• Create and maintain security documentation and knowledge base content.
• Deliver timely, professional, and customer focused security support to internal and external stakeholders.
• Communicate security issues, risks, and remediation steps clearly.
• Partner with business units to align security solutions with requirements.
• Maintain service-oriented mindset balancing security risk and operations.

Skills

Secure Email Gateways

Secure Web Gateways

EDR

SIEM

Security Awareness Training

Privileged Access

Microsoft Defender

Microsoft Defender XDR

Vulnerability Scanning

CIS/NIST frameworks

Microsoft & Cisco Systems

Networking fundamentals

Tools

Microsoft Defender

Microsoft Defender XDR

SIEM tools

Job description

At FORTÉ, every role plays a part in reimagining how the modern workplace works. Whetheryou're on the front lines with customers or behind the scenes making things run, your work helps people connect, collaborate, and get things done. From classrooms to control centers, we design and deliver the systems that power smarter, more connected workplaces – and it all starts with the people who make them possible. FORTÉ (formerly AVI Systems) is a 100% employee-owned company with 50+ years of experience and a bold new identity

This person will provide direct security support to FORTÉ employees, IT staff, and key stakeholders by monitoring, protecting, and improving the organization’s security posture. This role delivers Tier 2 security support, investigates security incidents, and supports ongoing security operations, awareness, and compliance initiatives.

What You Will be Doing:

Security Operations & Incident Response

• Monitor and respond to alerts from MDR, IDS, DLP, EDR, and email securityplatforms

• Investigate and remediate phishing, malware, and security incidents

• Maintain and improve secure email and web gateway controls

• Provide Tier 2 security escalation support and incident resolution

Vulnerability & Endpoint Management

• Review vulnerability scans and penetration test results

• Coordinate remediation and patching with Systems Administrators

• Participatein the organization’s vulnerability management program

• Maintain awareness of emerging threats and vulnerabilities

Identity & Access Management

• Support MFA andzero trustidentity solutions

• Assistwith password management tools and access reviews

• Perform quarterlyterminated useraudits and annual access reviews

• Secure shared and privileged account credentials

Security Awareness & Training

• Conduct quarterly phishing simulations

• Deliver security awareness campaigns andnew hiretraining

• Educateemployees on security best practices and emerging threats

Projects, Policies & Continuous Improvement

• Participatein IT andcross functionalsecurity projects

• Ensure compliance with organizational policies and standards

• Recommend updates to security policies, procedures, and controls

• Create andmaintainsecurity documentation and knowledge base content

Customer Focus

• Delivertimely, professional, andcustomer focusedsecurity support to internal and external stakeholders

• Communicate clearly and effectivelyregardingsecurity issues, risks, and remediation steps

• Partner with business units and customers to understand requirements and align security solutions accordingly

• Maintain aservice-orientedmindset while balancing security risk and operational needs

Communication & Reporting

• Document security incidents, investigations, and remediation activitiesin accordance withorganizational procedures

• Prepare clear,accuratereports and summaries for IT leadership, management, auditors, and other stakeholders

• Communicate security status, risks, and trends through regular reporting andadhocbriefings as needed

• Maintaintimelyand professional communication during incidents, projects, and security initiatives

Teamwork:

• Crosstrain with IT team members

• Document systems and processes

• Secure shared account credentials

• Perform peer documentation reviews

What You Bring to Assure Success:

• Experience with Secure Email Gateways, Secure Web Gateways, EDR, and SIEM tools

• Experience with Security Awareness Training and Privileged Access technologies

• Experience with Microsoft Defender

• Hands on experience administering and monitoring MicrosoftDefender XDR and relatedMicrosoft security products toidentify, investigate, and remediate security threats across endpoints, identities, email, and cloud workloads

• Experience with vulnerability scanning
• Knowledge of CIS and NIST frameworks

• Experience administering Microsoft andCisco Systems

• Understanding ofnetworking fundamentals including DNS, DHCP, HTTP/S, SSL, OSI, and TCP/IP

• Ability to explain complex concepts in simple terms

• CISSP, ISC², ISACA, Microsoft, Cisco, CompTIA, or equivalent industrycertificationspreferred but notrequired