Atmosera empowers businesses to redefine what's possible with modern technology and human expertise. Our exceptional experience across Applications, Data & AI, DevOps, Security, and the Microsoft Azure platform enables organizations to accelerate innovation, enhance security, and optimize operational agility. As a Microsoft Partner with seven specializations, GitHub AI Partner of the Year, a member of the GitHub Advisory Board, and a member of the prestigious Microsoft Intelligent Security Association (MISA), Atmosera expertly delivers cutting-edge, integrated solutions that deliver business value.

As a Security Analyst, you will join a team of cybersecurity professionals delivering proactive Managed Security and Managed Governance services. In this role, you'll help safeguard our clients' environments by identifying vulnerabilities, deploying effective protective measures, and working collaboratively to mitigate risks while ensuring compliance with industry standards and regulations. The ideal candidate is highly analytical, possesses hands-on experience with Microsoft security solutions, and is passionate about staying ahead of emerging cyber threats.

Key Responsibilities

Security Monitoring and Alert Triage

Monitor security alerts and incidents in Microsoft Sentinel, Defender XDR, and Defender for Cloud
Triage incoming alerts to determine severity, impact, and required response actions
Differentiate between false positives, benign activity, and actionable threats using established playbooks
Perform continuous monitoring of cloud, identity, endpoint, and network telemetry

Incident Investigation and Response

Investigate suspicious activity across Azure, Entra ID, Microsoft Defender XDR, and integrated data sources
Correlate logs, events, and indicators to establish timelines and determine root cause
Escalate confirmed or high-risk incidents to senior analysts or incident response teams
Execute or recommend containment actions in accordance with defined procedures

Log Analysis and Detection Support

Utilize Kusto Query Language (KQL) and Log Analytics to analyze security data
Correlate events across identity, endpoint, network, and cloud workloads
Identify trends, anomalies, and patterns indicative of malicious activity
Provide input into detection tuning and rule optimization efforts

Documentation and Reporting

Create and maintain detailed, audit-defensible investigation notes and case records
Document all triage decisions, escalation rationale, and response actions
Produce incident summaries and reporting for internal stakeholders and clients
Participate in shift handoffs and maintain continuity of ongoing investigations

Threat Intelligence and Continuous Improvement

Stay informed on emerging threats, vulnerabilities, and attack techniques
Apply threat intelligence to contextualize alerts and improve detection accuracy
Participate in post-incident reviews and contribute to process improvements
Support tuning efforts to reduce false positives and improve detection fidelity

Collaboration and Client Support

Work within a multi-tenant MSSP environment supporting multiple client environments
Collaborate with engineering, incident response, and client-facing teams
Provide clear and professional communication during incident escalations
Support service delivery objectives, SLOs, and operational metrics

Required Qualifications

1+ years of experience in a Security Operations Center or related security role

Hands-on experience with SIEM platforms (Microsoft Sentinel preferred)

Experience analyzing logs from one or more of the following:

Azure / Entra ID

Microsoft Defender (Endpoint, Identity, Cloud, Office 365)

Windows / Linux systems

Network security tools (firewalls, IDS/IPS)

Cloud Security Posture Management - Defender for Cloud

Basic understanding of incident response processes and frameworks

Strong analytical and investigative skills

Preferred Qualifications

Experience with Microsoft security ecosystem:

Microsoft Sentinel

Microsoft Defender XDR

Microsoft Defender for Cloud

Familiarity with KQL for log analysis and threat hunting

Understanding of MITRE ATT&CK framework and common attack techniques

Experience in an MSSP or multi-tenant environment

Relevant certifications:

Microso

Information Security Analyst (Remote - LATAM) at Atmosera