RT²

Security Engineer

• Monitor and triage alerts across various security tools
• Validate alert severity, business impact, affected assets, containment status, and escalation requirements.
• Coordinate security events from initial triage through containment, documentation, closure, and post-incident follow-up.
• Support daily dashboard review, security ticket queues, alert quality checks, and operational reporting.
• Develop, tune, and maintain detection logic in security tools.
• Reduce false positives and alert noise by reviewing recurring detections.
• Assist with incident response for endpoint, identity, cloud, email, and suspicious activity events.
• Support security operations across various Microsoft security tools.
• Create and maintain security runbooks and knowledge base articles.