About the job
At Security Risk Advisors (SRA), our mission is to elevate security standards every day to protect our clients and their customers. This commitment begins with our dedicated team members and their experiences. We take pride in fostering a workplace culture that emphasizes support and belonging, aligning with our core value of 'It’s Personal'. SRA is dedicated to transparent career progression, diverse DEI initiatives, and community engagement, along with competitive benefits that include mental health support, promoting a sustainable and engaging work environment. We have been recognized twice as a Best Place to Work by the Philadelphia Business Journal.
Role Overview
The Cybersecurity Operations Consultant is an entry-level position within SRA’s CyberSOC team. You will be responsible for monitoring, triaging, and investigating security alerts across various data sources, including endpoint, network, identity, and cloud. Your findings will be documented and communicated effectively for client understanding. This role supports 24/7 SOC operations, providing opportunities to work with multiple client environments and access modern security tools, alongside structured mentorship and training opportunities.
Key Responsibilities
- Consistently monitor and triage security alerts across endpoint, network, identity, and cloud telemetry.
- Investigate alerts to assess severity, scope, and determine if the activity is benign, suspicious, or malicious, escalating as needed following documented procedures.
- Assist in initial incident response activities, including evidence collection, timeline development, and basic containment recommendations under supervision.
- Utilize SIEM, EDR, NDR/NSM, and SOAR platforms to detect, investigate, and respond to threats, including tools like Splunk or Microsoft Sentinel (SIEM), CrowdStrike Falcon, or Microsoft Defender for Endpoint (EDR).
- Integrate threat intelligence and frameworks such as MITRE ATT&CK to enhance investigations and clearly communicate attacker behavior.
- Document all activities in case management systems, including investigation steps taken, evidence reviewed, decisions made, and recommendations.
