Cybersecurity Specialist

· Collaborate with the IT department to develop and implement databases, data collection systems, and other strategies that optimize statistical efficiency and quality.

Security Monitoring & Incident Response

· Monitor and triage security alerts from Microsoft Defender XDR, Defender for Endpoint, Microsoft 365 Defender, and other security tools in use by the organization, following established procedures.

· Gather initial details on alerts, such as affected users, devices, and activity, and escalate incidents to the Cybersecurity Manager or senior staff according to escalation procedures.

· Assist with endpoint investigations and response actions, including Defender for Endpoint Live Response, under the direction of senior staff.

· Review basic device activity such as running processes, network connections, and event logs to help identify signs of compromise.

· Document security incidents and maintain accurate, timely records in the ticketing system.

Identity & Access Management

· Document security incidents and maintain accurate, timely records in the ticketing system.

· Perform routine account tasks in Microsoft Entra ID including password resets, account unlocks, and MFA re-enrollment.

· Review risky users and risky sign-in events in Entra ID Protection and take remediation or dismissal actions according to established runbooks.

· Assist with reviewing Conditional Access alerts and access anomalies as directed.

· Assist with onboarding and offboarding user accounts, group membership updates, and license assignments within Microsoft 365.

User Communication & Verification

· Contact end users by phone, email, or in person to verify reported or detected suspicious activity and confirm whether actions were user-initiated.

· Document user confirmation outcomes and include findings in incident records.

· Communicate security guidance to non-technical staff in a clear, approachable manner without causing alarm.

Security Awareness & Training

· Help deliver small-group, in-person phishing awareness trainings for staff using provided materials, which may require travel to the Santa Fe Springs location or other company-designated locations as needed.

· Help update training examples based on phishing activity seen in the environment.

· Track training attendance and report completion to the Cybersecurity Manager.

· Assist with simulated phishing campaigns using Microsoft Defender’s Attack Simulator or equivalent tooling.

General Security Operations

· Monitor the Microsoft 365 Defender portal and Entra ID dashboards for alerts requiring action.

· Assist with the review of email quarantine and reported phishing messages, releasing or blocking according to procedures.

· Follow established security runbooks, escalation paths, and change management procedures.

· Help keep internal documentation and response playbooks up to date.

· Work with IT and other departments to support the organization’s cybersecurity measures.

· Assist with security improvements, vulnerability remediation, and risk reduction efforts as directed.

· Other duties as assigned by direct supervisor.

Other Duties & Expectations

· Maintains professionalism in appearance, communication, attitude, conduct, and interactions at all times while representing the organization with integrity, respect, and professionalism.

· Maintains regular, reliable, and punctual attendance to support HR operations. Complies with Agency policies, professional standards, confidentiality and safety requirements, and applicable laws and regulations.

· Performs other duties, responsibilities, projects, and assignments assigned by supervisor or leadership based on operational needs., · Performs other duties, responsibilities, projects, and assignments assigned by supervisor or leadership based on operational needs.

Technical Skills

· Minimum of one (1) year of experience in IT support, helpdesk, or a related technical role.

· Working knowledge of Microsoft 365 administration, Microsoft Entra ID, Microsoft Defender alert triage, and endpoint security.

· Experience troubleshooting Windows operating systems, user accounts, password resets, and multi-factor authentication (MFA).

· Basic understanding of cybersecurity principles, including phishing, malware, email security, access controls, least privilege, and confidentiality, integrity, and availability (CIA).

· Willingness to learn applicable information security and privacy regulations, including HIPAA and 42 CFR Part 2, and cybersecurity frameworks such as NIST and CIS Critical Security Controls.

Professional Experience & Skills

· Strong analytical, problem-solving, organizational, and documentation skills with attention to detail.

· Effective written and verbal communication skills, including the ability to assist non-technical users and conduct small-group training.

· Ability to provide professional and courteous technical support by phone, email, and in person.

· Demonstrates patience, sound judgment, professionalism, and composure when responding to technical issues or urgent situations.

· Ability to work independently and collaboratively, prioritize assignments, follow established procedures, and maintain confidentiality.

· Demonstrates initiative, adaptability, and a willingness to develop technical knowledge and cybersecurity skills.

· Ability to work remotely with occasional in-person attendance (approximately 20% annually) at the Santa Fe Springs office or other designated locations for training, meetings, onboarding, and business needs.

· Ability to participate in an on-call rotation for after-hours security incident response.

Additional Requirements

· Valid California driver’s license with a minimum of two (2) years of driving experience, acceptable driving record, and ability to pass and maintain eligibility under the DMV Pull Notice Program; must be able to operate an agency or personal vehicle for work-related travel, including client transport and inter-site duties.

· Must maintain all required licenses, certifications, trainings, credentialing approvals, security clearances, and system access requirements necessary to perform assigned duties

Education Requirements

· Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and experience (such as an associate degree plus 2 years of IT experience, or 4 years of IT support or helpdesk experience). Relevant certifications such as CompTIA Security+ may count toward the experience requirement.

Physical Demands and Working Environment:

· This position is remote. Occasional in-person presence is required, up to approximately 20% of the year, for onboarding, training, meetings, or other business needs at the Santa Fe Springs location or any other location designated by the organization.

· Travel to company locations to help deliver small-group, in-person phishing awareness trainings.

· Participation in an on-call rotation for after-hours incident response.

· Ability to operate a computer for extended periods.

· Ability to communicate clearly in person, by phone, and electronically.

· Maintains regular, reliable, and punctual attendance to support operations. Complies with Agency policies, professional standards, confidentiality and safety requirements, and applicable laws and regulations.

• Dental insurance
• Health insurance
• Vision insurance