OSIbeyond

Security Operations

• Monitor client environments continuously for cybersecurity threats using SIEM, endpoint detection and response, identity protection, and email security platforms
• Own the live alert queue during each shift; triage detections, determine scope and severity, and execute or authorize appropriate responses
• Conduct structured shift handoffs and ensure every detection, investigation, and client commitment has a clear owner
• Investigate account compromise, business email compromise, social engineering, malware, and ransomware incidents
• Analyze servers, workstations, identities, and other potentially compromised assets
• Contain and remediate confirmed threats using automation workflows, scripts, policies, playbooks, and platform controls
• Escalate incidents according to the incident response plan when they exceed the analyst’s authority or expertise
• Provide timely, professional incident communications to clients and internal stakeholders
• Perform scheduled vulnerability scanning across client environments
• Support CMMC and NIST SP 800-171 compliance objectives by producing required monitoring evidence, logs, and reports
• Review overnight Tines automation logs, validate automated actions, and remediate or escalate exceptions
• Respond to overnight escalations while on call and document all actions
• Identify repetitive manual work and false positives for automation or detection tuning
• Test and provide structured feedback on new detections and automation workflows
• Track and document all work in the ticketing system
• Meet KPIs, support peers across both shifts, and escalate assignments when necessary

Security Operations Center (SOC) Analyst

Engineer

• Review AI-assisted request parameters or associated request forms and confirm accuracy before execution
• Authorize, initiate, and verify automated workflows for non-regulated clients
• Identify and correct inaccurate or incomplete request data
• Manually fulfill exceptions and report recurring request types outside existing automation
• Identify recurring manual tasks and submit them for automation evaluation
• Test and validate new automation and AI workflows before release
• Respond to inbound support calls and provide live telephone and remote technical support
• Complete automatically scheduled remote sessions
• Install non-standard software
• Diagnose and resolve application, workstation, and Microsoft 365 desktop application issues
• Provide end-user guidance on Microsoft 365 and standard business applications
• Troubleshoot network connectivity, wireless, VPN, and home internet issues
• Use Claude AI to search internal documentation and external resources for diagnosis and SOPs
• Identify and escalate requests according to established procedures
• Resolve system and network administration requests and escalations across client environments
• Administer Microsoft 365, Microsoft Entra ID, and Active Directory
• Provision executive, special-circumstance, and regulated-client accounts
• Administer SharePoint Online permissions and create standard SharePoint sites
• Execute migrations according to documented procedures
• Troubleshoot server connectivity, Remote Desktop access, vendor remote sessions, and outages
• Perform large-scale and executive workstation deployments
• Provide hardware support for workstations, servers, and network equipment
• Maintain client inventory records, SOPs, ticket records, and documentation
• Support on-site client dispatch and travel to client sites as required
• Execute documented security incident response procedures
• Complete tickets and remote sessions according to SOPs and service level agreements
• Maintain a prioritized ticket queue and notify the VP of Technical Services when workload exceeds capacity
• Coordinate remote-session scheduling and carrier pickup of client workstations
• Participate in the on-call rotation and technical training

Level 2 Engineer – Human Support

• Provide high-quality technical support to OSIbeyond clients across helpdesk/user support and system/network administration
• Review AI-assisted request parameters, validate accuracy, authorize automated workflows, and verify completion
• Manually fulfill non-automated or regulatory-compliance-related requests
• Identify recurring manual tasks and submit them for automation evaluation
• Test and validate new automation and AI workflows before release
• Respond to inbound support calls and own live support requests through resolution
• Complete scheduled remote sessions using approved RMM-based and ad hoc remote-support tools
• Install non-standard software and troubleshoot application, workstation, Microsoft 365, network, VPN, wireless, and home-internet issues
• Provide end-user guidance on Microsoft 365 and standard business applications
• Use Claude AI to locate SOPs and documentation
• Identify and escalate requests according to established procedures
• Administer Microsoft 365, Microsoft Entra ID, Active Directory, SharePoint Online permissions, and standard SharePoint sites
• Provision executive, special-circumstance, and regulated-client accounts
• Execute documented migrations and troubleshoot server connectivity and outages
• Support remote workstation deployments, hardware replacement coordination, and post-deployment validation
• Maintain client inventory records and standard operating procedures
• Provide remote diagnosis, handoff documentation, and coordination for on-site dispatches
• Execute documented security incident response procedures
• Complete tickets and remote sessions in accordance with SOPs and SLAs
• Maintain accurate documentation, ticket records, and prioritized queues
• Coordinate remote-session scheduling and carrier pickup of client workstations
• Participate in on-call rotation and technical training
• Maintain availability during scheduled Eastern Time support hours and secure company/client information in the remote work environment

Security Operations Center (SOC) Analyst

Level 2 Engineer – Human Support

Level 2 Engineer, Human Support