[Remote] IT Security Operations Engineer
Note: The job is a remote job and is open to candidates in USA. ComResource is a company that specializes in providing IT and security operations support. They are seeking an IT Security Operations Engineer to work hands-on across multiple client engagements, providing enterprise IT support and security operations to ensure client environments are secure and operational.
Responsibilities
- Provide L1/L2/L3 help desk and end-user support across client environments
- Manage endpoint lifecycle: deployment, MDM administration, patching, and hardware/software management
- Administer identity and access management (Azure AD/Entra ID, Okta, MFA, SSO)
- Support corporate IT infrastructure: network operations, collaboration tools (M365), enterprise applications
- Manage user onboarding/offboarding, account provisioning, and access reviews
- Maintain ITSM documentation and work within ticketing systems (FreshService, ServiceNow, or similar)
- Support IT vendor relationships and escalations
- Monitor security alerts from SIEM, EDR, and email/web security platforms
- Triage and investigate security events; coordinate incident containment and remediation
- Operate vulnerability scanning tools; prioritize findings and track remediation to closure
- Administer and optimize endpoint protection (EDR) and identity security monitoring
- Support threat detection rule development and tuning
- Conduct log review, anomaly detection, and security control effectiveness monitoring
- Assist with security reporting and contribute to client-facing dashboards and metrics
- Work across multiple concurrent client engagements under leadership
- Participate in client meetings, document findings, and contribute to deliverables
- Maintain operational runbooks and playbooks for client environments
- Support compliance activities (SOC 2, ISO 27001, NIST) as part of broader engagements
Skills
- Provide L1/L2/L3 help desk and end-user support across client environments
- Manage endpoint lifecycle: deployment, MDM administration, patching, and hardware/software management
- Administer identity and access management (Azure AD/Entra ID, Okta, MFA, SSO)
- Support corporate IT infrastructure: network operations, collaboration tools (M365), enterprise applications
- Manage user onboarding/offboarding, account provisioning, and access reviews
- Maintain ITSM documentation and work within ticketing systems (FreshService, ServiceNow, or similar)
- Support IT vendor relationships and escalations
- Monitor security alerts from SIEM, EDR, and email/web security platforms
- Triage and investigate security events; coordinate incident containment and remediation
- Operate vulnerability scanning tools; prioritize findings and track remediation to closure
- Administer and optimize endpoint protection (EDR) and identity security monitoring
- Support threat detection rule development and tuning
- Conduct log review, anomaly detection, and security control effectiveness monitoring
- Assist with security reporting and contribute to client-facing dashboards and metrics
- Work across multiple concurrent client engagements under leadership
- Participate in client meetings, document findings, and contribute to deliverables
- Maintain operational runbooks and playbooks for client environments
- Support compliance activities (SOC 2, ISO 27001, NIST) as part of broader engagements
Company Overview
Company H1B Sponsorship