Your Responsibilities:

• Monitor and analyze security events to identify malicious activity and support timely detection and response.
• Investigate alerts using endpoint, network and cloud telemetry, validating events and escalating where appropriate.
• Perform initial incident triage, classification and prioritization using established playbooks.
• Execute approved containment actions and support eradication and recovery activities.
• Maintain accurate investigation records, evidence and operational documentation.
• Operationalize threat intelligence by correlating indicators of compromise with security events.
• Support risk-based vulnerability prioritization by validating findings and identifying exploitable exposure.
• Collaborate with Infrastructure, Engineering and Application Security to support incident resolution.
• Evaluate monitoring effectiveness and recommend improvements to Security Architecture & Technology.
• Contribute to operational metrics, lessons learned and continual service improvement.
• Participate in cyber security table top exercises and maintain operational readiness.
• Support a collaborative, customer-focused and high-performing security culture.

About You:

• 1-2+ years in Cyber Security, Information Technology or a related discipline, with experience supporting security monitoring, incident response or IT operations within enterprise environments.
• Demonstrated experience monitoring and investigating security events across endpoint, network, cloud or application environments using enterprise security technologies.
• Foundational understanding of cyber threat detection, incident response processes and security operations best practices.
• Experience working with technologies such as SIEM, EDR/XDR, IDS/IPS, email security, cloud security, vulnerability management and identity services.
• Understanding of networking, operating systems, authentication, logging and common attack techniques used by modern threat actors.
• Familiarity with threat intelligence concepts, the MITRE ATT&CK framework and risk-based vulnerability management principles.
• Working knowledge of industry frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, CIS Controls and SOC 2.
• Information Security certifications are desirable and may include Security+, CySA+, GSEC, SSCP or equivalent industry-recognized credentials.
• Excellent verbal, written and documentation skills with the ability to communicate technical findings clearly and professionally.
• Strong analytical and problem-solving skills with a methodical approach to investigating security events.
• Demonstrated ability to prioritize work, adapt to changing priorities and perform effectively within a fast-paced operational environment.
• Collaborative team player with a strong commitment to continuous learning and operational excellence.

What you can expect:

At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills.

Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion.

We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual.

To learn more about our business, culture, and community involvement, visit www.globalrelay.com.