Job Description

Requirements Must have: We need a foundational grasp of core information security topics, including identity and access, MFA, phishing, endpoint protection, and common alert patterns. We expect familiarity with Microsoft 365 and its security and admin interfaces. We value accurate, dependable documentation habits and strong written communication. You should be disciplined about following runbooks precisely and escalating early instead of making assumptions. You must be willing to take part in an on‑call and after‑hours rotation. Security+ or a similar entry‑level certification is preferred, whether completed or in progress. Exposure to SOC, EDR, SIEM, or alert‑triage tools, as well as platforms such as SaaS Alerts or Rewst, is preferred. Awareness of compliance requirements such as HIPAA, PCI, or CJIS is preferred. An associate or bachelors degree in cybersecurity or IT, or equivalent practical experience, is preferred. MSP or multi‑client environment experience is preferred. Responsibilities: We want you to acknowledge and triage incoming security alerts and tickets from SaaS Alerts, SOC, and EDR detections, moving them forward under senior guidance. You will assess severity against each clients Alert Response Playbook and elevate appropriately to the Senior Analyst or vCSO. You will serve as the primary first‑line owner of the SaaS Alerts Microsoft 365 queue across onboarded client tenants. You will identify noisy or benign detection patterns for tuning or automation so the queue remains manageable. You will carry out routine tasks from checklists and runbooks, including account compromise first response, MFA and password resets with identity verification, and phishing report review. You will monitor endpoint agent health and follow up on offline or unreporting endpoints until resolved. You will recognize benign scanner and penetration‑test traffic and coordinate allowlisting with the SOC so partners are not alerted unnecessarily. You will keep ticket notes complete enough for a senior analyst to continue work without needing clarification. You will gather compliance evidence when requested, including screenshots, exports, and asset lists. You will help resolve recurring security findings such as cleartext PII, non‑expiring passwords, missing MFA, and Microsoft Secure Score quick wins. You will participate in the on‑call and after‑hours rotation, responding according to the documented escalation SLA. Company: We are CHR Creative, a security‑first managed services and IT risk management firm based in Milwaukie, Oregon, just 10 minutes from Portland. Since 2006, we have partnered with CFOs, senior leadership, and company principals to reduce technology risk, support compliance, and build resilient operations. We support more than 100 clients, with especially deep experience in the nonprofit and human services sector. We are veteran‑owned, locally rooted, and committed to long‑term client relationships. This is a full‑time, hybrid remote role competitive pay comprehensive health, vision, and dental coverage a 401(k) plan with company match paid time off professional development support, including a clear path from Tier 1 toward Senior Analyst We foster a team culture centered on accountability, transparency, continuous learning, and inclusion. #J-18808-Ljbffr CHR Creative

Job Tags

Similar Jobs