Security Operations: Incident Response & MDR

Ita-Group-Inc; West Des Moines (IA); On-site; USD 80,000 - 105,000; Full time

Job summary

ITA Group, Inc. in Des Moines, IA seeks an Information Security Administrator to protect ITA Group's systems, networks, and data. You will manage security operations, investigate alerts, and work with MDR partners to enhance detections and playbooks.

Ideal candidates have 3–5 years in security operations or IT, certifications such as Security+ or CySA+, and a proven ability to triage incidents, analyze risk, and communicate findings to technical and non-technical stakeholders.

Qualifications

• Bachelor's degree in cybersecurity, information security, IT, CS, networking, or related field; equivalent experience considered.
• 3–5 years in IT, information security, security operations, or related discipline.
• 1–2 years of direct experience performing security monitoring, triage, and vulnerability management.

Responsibilities

• Monitor and investigate alerts from MDR/SIEM and related platforms.
• Perform initial and intermediate triage to determine credibility, scope, and impact.
• Validate investigations and independently investigate when evidence is incomplete or high risk.
• Partner with MDR to tune detections and mature incident-response playbooks.
• Participate in containment, eradication, and post-incident reviews.
• Coordinate investigations with infrastructure, cloud, and other teams.

Skills

Security monitoring

Incident response

Vulnerability management

Cloud security

MDR/MSSP experience

SIEM expertise

PowerShell/Python

Networking concepts

Communication

Documentation

Education

Bachelor's degree in cybersecurity or IT

Equivalent professional experience

Tools

SIEM tools

EDR/XDR tools

CSPM

DLP systems

Job description

ITA Group, Inc. in Des Moines, IA seeks an Information Security Administrator to protect ITA Group's systems, networks, and data. You will manage security operations, investigate alerts, and work with MDR partners to enhance detections and playbooks.

Ideal candidates have 3–5 years in security operations or IT, certifications such as Security+ or CySA+, and a proven ability to triage incidents, analyze risk, and communicate findings to technical and non-technical stakeholders.