Cybersecurity Technician Job Summary

The Cybersecurity Technician plays a critical role in alert investigation and incident response support. This technician reviews generated alerts, correlates events, and contextualizes data to assess the severity and scope of potential threats, determining whether they are true positives or false positives. They are responsible for escalating critical findings to the Security Administrator. This role requires maintaining and strengthening our security posture across endpoints, servers, cloud services, and network infrastructure, with a strong emphasis on threat detection, incident response, and proactive defense strategies.
 

Cybersecurity Technician Duties and Responsibilities 

This role is critical in providing initial support related to security alerts, ensuring customer and end-user information is protected, and facilitating the proper response to cybersecurity incidents. Please note that the responsibilities outlined below are not exhaustive, and additional duties may be assigned as needed.

1. Assist with incident response, as well as monitor, triage, and respond to security alerts using Microsoft Defender XDR and Microsoft Sentinel.
2. Investigate and escalate suspicious activity flagged by Abnormal Security, Defender for Office 365, and other threat detection tools.
3. Assist in developing and tuning Sentinel analytics rules, workbooks, and playbooks to improve threat visibility and automate response actions.
4. Research and provide feedback on patching operations across endpoints and servers using Microsoft Autopatch, Azure Update Management, Azure Arc, and PDQ Connect.
5. Participate in internal meetings, including collaborating with IT and infrastructure teams to identify, assess, and remediate vulnerabilities using internal tools and external threat intelligence.
6. Help secure Microsoft 365 environments, including Exchange Online, SharePoint, Teams, and OneDrive.
7. Assist in configuring and maintaining endpoint protection policies, attack surface reduction rules, and device compliance baselines.
8. Conduct threat research by analyzing emerging threats and vulnerabilities to improve incident identification, including proactive creation of Indicators of Compromise (IOCs).
9. Contribute to Microsoft Purview initiatives, including eDiscovery, Audit, Data Loss Prevention (DLP), and Data Security Posture Management (DSPM).
10. Support the development and enforcement of policies across our ecosystem, encompassing both Microsoft Purview configurations and formal company-wide written policies.
11. Maintain detailed documentation for security procedures, incident response workflows, and configuration changes.
12. Create and deliver user training and awareness programs to promote cybersecurity best practices across the organization.

 
Cybersecurity Technician Qualifications and Skills

Education Background:
High School Diploma or GED equivalent (required).
Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field is preferred.

Experience:
Minimum of two years of experience in a cybersecurity or IT role (required).
Experience in an organization with a strong emphasis on security practices and compliance is preferred.
Hands-on experience with Microsoft security tools such as Defender XDR, Sentinel, and Purview is a plus.

Technical Skills:
Typing speed of at least 30 words per minute.
Security+ (Sec+) certification is highly preferred.
Additional certifications such as A+, and Network+ are considered a plus.
Familiarity with Microsoft Defender XDR, Microsoft Sentinel, and other security monitoring tools.
Basic understanding of Microsoft 365 security configurations.
Understanding of endpoint protection policies, attack surface reduction rules, and device compliance baselines.
Exposure to Microsoft Purview features such as eDiscovery, Audit, DLP, and DSPM.

Soft Skills:
Exceptional listening and comprehension skills
Clear, concise, and professional communication abilities
Strong writing skills for creating grammatically correct and well-structured documentation
Excellent troubleshooting skills with the ability to quickly isolate and resolve issues
Ability to accurately interpret customer problem descriptions and summarize interactions effectively 
Necessary Experience:
Minimum of 2 years of experience in a cybersecurity or IT role.
Experience working in an organization with a strong emphasis on security practices is preferred.

 
Working Conditions

This position involves both sedentary and other work.  For part of the shift, s/he will work at a desk in an office setting, doing paperwork, typing, filing, and key entry on a Video Display Terminal.  Extensive telephone and correspondence work required on a daily basis.  For part of the shift, s/he will stand, stoop, kneel, crouch, and reach, moving about the dealership facility to communicate with managers, employees, and customers.  S/he will be required to travel within and outside the State, both by car and by airplane on a monthly basis.  Will be exposed to noise, 
dust, exhaust fumes, and a variety of other hazardous and nonhazardous materials.



WE ARE AN EQUAL OPPORTUNITY EMPLOYER