Event Management Technician

Event Management Technician

The Event Management Technician is a crucial member of the Event Management Center (EMC), responsible for providing 24/7 monitoring and management of clients' environments for security events and IT incidents. This role includes establishing the extent of threats, assessing business impacts, and advising on appropriate actions for containment and remediation. The Technician will also ensure effective event management throughout the lifecycle to minimize client impact and operational costs.

The responsibilities for this position include:

• Monitor event and incident response ticket queues, triaging as necessary to ensure adherence to service level agreements.
• Promptly transfer cybersecurity and IT incident tickets to clients, appropriate departments, or internal contacts for resolution.
• Analyze system, security, and application logs to diagnose faults, identify abnormal behavior, and eliminate false positives.
• Use SIEM and Endpoint Detection and Response tools to investigate alerts, build incident timelines, and document potential compromises.
• Implement changes to resolve critical issues in client systems based on monitoring and analysis of events.
• Maintain accurate logs, timelines, and system documentation for all tasks and events, ensuring traceability and accountability.

Qualified candidates must meet the following job requirements:

• Strong problem-solving skills with a passion for using technology to address client challenges.
• Team-oriented mindset, with effective communication skills and high attention to detail.
• Ability to function effectively in a fast-paced environment, meeting client and corporate expectations for quality and performance.
• Client-focused approach, prioritizing internal and external client needs.
• Inclusive mindset, valuing contributions from team members and clients alike.

Education, Experience, and Certifications

• One of the following certifications is required:
  CompTIA A+, CompTIA N+, C|EH, or equivalent
• At least 1 year of experience in cybersecurity, Information systems or a related field is preferred.
• Associate's degree in cybersecurity, information systems, or a related field is preferred.
• Experience with SIEM platforms, firewall management, and endpoint detection and response platforms

Supervisory Responsibility

This position has no direct reports and is not expected to supervise the work of others. This position may be expected to self-manage time and priorities based on incoming tickets, following Corsica policies and procedures

Work Environment

In most cases, work will be performed in a climate-controlled office space. Work will require standard office equipment, such as computers, phones, and multi-function printers. The position will be expected to make use of specialized tools and software for troubleshooting and maintaining the security of systems and infrastructure.

Travel

This position does not require travel. No overnight travel is expected.

Physical Demands

• Candidates should be able to lift 20 pounds or more.
• Position requires sitting for long periods of time and may occasionally require bending, lifting, and driving.

Position Type/Expected Hours

This is a full-time position for four, 10-hour days (40 hours total) per week. A one-hour lunch break is provided. Holiday shift coverage may be expected.

• Four days spanning Sunday through Saturday, with three days off.
• Shifts may include 6AM to 5PM; 12PM to 11PM; or 9PM to 8AM

Other Duties

Please note this job description does not contain a comprehensive listing of all possible activities, duties, or responsibilities required for this position. Duties, responsibilities, and activities may change at any time with or without notice.