Apply on Employer Site

The Intersect Group · 2 days ago

SecOps Engineer

Kennesaw, GA

Contract

Onsite

Senior Level

$100K/yr - $140K/yr

5+ years exp

The Intersect Group is seeking a Security Operations Engineer (SecOps) to enhance their day-to-day security operations. This role focuses on detection, analysis, and incident response, collaborating with internal IT teams and the 24/7 Security Operations Center (SOC).

ConsultingHuman ResourcesInformation TechnologyLegal

Responsibilities

Ensure continuous monitoring of security controls and detection platforms

Detect, analyze, and qualify suspicious or malicious activity across cloud, on-prem, identity, and endpoint environments

Help maintain high-quality detection capabilities with a strong focus on low false-positive rates and actionable alerts

Assess and prioritize security alerts based on risk, scope, and business impact

Qualify incidents and provide clear, concise, and actionable diagnostics

Escalate appropriately to the 24/7 SOC or relevant IT teams with structured context

Actively participate in security incident response activities

Support containment, mitigation, and remediation actions in coordination with IT and security partners

Work closely with the 24/7 SOC and internal stakeholders during active incidents

Contribute to security hardening and control configuration improvements

Improve detection rules, alert logic, and operational security workflows

Leverage lessons learned from incidents to strengthen the overall security posture

Clearly document security incidents, investigations, and response actions

Contribute to concise, risk-oriented security reporting for internal stakeholders

Contribute to the secure operation of Microsoft 365 environments

Monitor and analyze alerts related to identity, email, collaboration, and endpoint usage

Participate in Microsoft 365–related incident response activities

Support configuration hardening and continuous improvement of security controls

Contribute to awareness initiatives around identity-based and email-driven threats

Work closely with Support, Infrastructure, Cloud, and Digital teams

Interface with the 24/7 SOC and external security partners

Participate in incident simulation and tabletop exercises

Contribute to security procedures, runbooks, and operational documentation

Operate within the group security governance framework

Qualification

Security OperationsIncident ResponseSIEMMicrosoft 365 SecurityCloud SecurityEDR/XDRDetectionMonitoringContinuous Improvement MindsetTeam-orientedEffective Communication