Security Monitoring & Incident Response Specialist in Sacramento, CA

Key Responsibilities
Monitor and analyze security logs, alerts, and events.
Support log aggregation, threat detection, and detection-rule tuning.
Investigate suspicious activity and security incidents.
Support incident triage, containment, remediation, and recovery.
Develop and maintain incident-response playbooks.
Support evidence handling and incident documentation.
Conduct post-incident reviews and recommend improvements.
Prepare operational security and incident reports.

Qualifications
5+ years of security operations, monitoring, detection, or incident-response experience.
Experience with SIEM, log analysis, threat detection, and incident investigation.
Knowledge of network, endpoint, cloud, and application security.
Preferred: GCIH, GCIA, CISSP, Security+, or relevant SIEM certifications.