<p><strong><u>About ABC Legal Services:<br></u></strong>ABC Legal Services is proud to be the national leader in service of process. We are a team of 1000 and growing with offices in Los Angeles, Oklahoma City, Phoenix, Brooklyn, Chicago, Washington DC, and more. Seattle is our home and headquarters. We’ve been successful in this unique business for over 30 years and we continue to advance our technology and business processes to remain years ahead of what our competition is able to offer. Our focus is to expand our technology lead, acquire and integrate less efficient competitors, and tap into new segments through an integrated inbound marketing and sales approach.</p> <p><strong>Job Overview:<br></strong></p> <p><span data-contrast="none">ABC Legal Services is adding a Security Analyst I to its IT team. This is an early career role for someone who already has security work under their belt and wants to own more of it.</span><span data-ccp-props="{"335559739":120}"> </span></p> <p><span data-contrast="none">You will work directly with the IT Manager and the System Administrator team on the day to day security operations that keep the company safe: alert triage, access reviews, endpoint compliance, vulnerability remediation, and audit evidence. You will not be expected to arrive knowing our environment. You will be expected to already know how to work an alert.</span><span data-ccp-props="{"335559739":120}"> </span></p> <p><span data-contrast="none">We are a small team, so you will see the whole picture rather than one narrow slice of it.</span></p> <p><strong>What you’ll do</strong></p> <ul> <li> <p><strong><span data-contrast="none">Security operations (your core work)</span></strong><span data-ccp-props="{"335559738":220,"335559739":80}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Triage detections in CrowdStrike Falcon, escalating what needs a second set of eyes</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Work in the Falcon console daily: detections, host containment, policy and sensor health, and detection tuning as you ramp</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Review Entra ID sign in and audit logs for suspicious authentication activity</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Investigate user reported phishing and take action on malicious mail</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">Work the vulnerability queue: track findings, chase remediation, report on progress</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none">Run recurring access reviews across Microsoft Entra ID and flag anything that looks wrong</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <p><strong><span data-contrast="none">Identity and endpoint support</span></strong><span data-ccp-props="{"335559738":220,"335559739":80}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none">Partner with the System Administrator team on Conditional Access and MFA policy</span><span data-ccp-props="{"335559739":80}"> </span></li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":360,"335559991":240,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none">Monitor device compli