IT Administrator / SOC Analyst

About Apollo

Apollo Information Systems is a cybersecurity services company delivering comprehensive security and compliance programs to organizations that need measurable protection without the burden of building it alone. Backed by a Series A investment led by Syn Ventures, Apollo is pioneering a cybersecurity-as-a-service model that replaces fragmented tools and episodic engagements with unified, outcome-driven security programs.

Through Apollo Aegis - a subscription-based cybersecurity and compliance platform - and a full portfolio of managed security, advisory, assessment, incident response, and offensive security services, Apollo helps organizations reduce risk, simplify operations, and maintain continuous compliance. Apollo's primary markets include state and local government, K-12 and higher education, and mid-market enterprises, with deep specialization in election security.

Our Culture

We are growing rapidly and have significant expansion plans and growth capital. We foster a collaborative environment where deep cybersecurity expertise meets business acumen, enabling our professionals to solve complex security challenges while building lasting client partnerships. We pride ourselves on our integrity and ethics. You’ll find smart, professional, mission-driven, hardworking, genuinely kind and good colleagues here. We primarily work remotely but have a hub in Denver.

Position Overview:

This is a dual role. The primary responsibility is IT systems administration and end-user support — owning the IT ticket queue, resolving user issues, and keeping internal and client systems running reliably. When capacity allows, the individual works as a SOC Analyst I, monitoring and triaging security alerts alongside the Security Operations Center team. The role is an excellent growth path for someone who wants to build both IT operations depth and hands-on security operations experience.

Key Responsibilities:

• IT Administrator Responsibilities

• Own and work the IT ticket queue: respond to incidents, problems, and service requests, and resolve end-user issues promptly.

• Troubleshoot hardware, software, and networking issues across endpoints, servers, and applications.

• Install, configure, maintain, and administer servers, operating systems, and applications.

• Support operational, technical, and system requirements for server location, installation, operation, and maintenance.

• Prepare and maintain operating procedures for technical support, troubleshooting, and routine systems administration.

• Onboard new employees with the appropriate technical solutions, accounts, and software, including troubleshooting.

• Perform related IT operations work as assigned.

• SOC Analyst Responsibilities

• Monitor security events and alerts using SIEM tools and other security technologies.

• Analyze and triage security alerts to determine severity and potential impact.

• Perform initial incident response activities and escalate issues when necessary.

• Document and track security incidents and their resolutions.

• Collaborate with the SOC team and contribute to security documentation and procedures.

Qualifications

• Required

  • Intellectual curiosity. Must be interested in growing, learning, improving, and expanding your skills.

  • Knowledge of systems administration: operating systems, applications, and computer hardware/software configuration and troubleshooting.

  • Proficiency with networking concepts, protocols, and security principles.

  • Minimum 2 years of experience in IT/systems administration, helpdesk, or a related field.

  • Strong analytical and problem-solving skills, with the ability to work a busy ticket queue and prioritize effectively.

  • Experience with cloud platforms (e.g., M365, Azure, AWS).

  • Basic scripting (e.g., PowerShell, Bash, Python).

  • Excellent written and verbal communication and a customer-service mindset.

  • Ability to work in a fast-paced environment and handle multiple priorities.

  • Willingness to support SOC shift coverage as needed.

• Preferred

  • Experience managing a Microsoft 365 environment, including Entra, Exchange, Intune, and SharePoint.

  • Experience managing an Azure infrastructure environment.

  • Identity and access management best-practice knowledge.

  • Familiarity with common security tools (e.g., firewalls, IDS/IPS, SIEM, EDR/MDR).

  • Experience with CrowdStrike, Sophos, or SentinelOne platforms.

  • Exposure to one or more SIEM platforms (e.g., Exabeam, Azure Sentinel, Splunk).

  • Network security experience with Sophos or Fortinet.

  • Familiarity with cloud identity and access management platforms (e.g., Microsoft Entra ID, Google Workspace)

Expectations:

• At 30 days:

  • Complete onboarding to Apollo's IT environment and toolstack — gain working access to and baseline familiarity with the ticketing system, M365 environment, SIEM, EDR, and core security tooling used by both the IT and SOC teams

  • Begin actively working the IT ticket queue under guidance — resolving tier-1 incidents and service requests independently, escalating appropriately, and documenting resolutions clearly

  • Shadow SOC analysts during alert triage and monitoring shifts to understand Apollo's detection logic, escalation thresholds, and incident documentation standards before owning SOC work independently

• Within 90 days:

  • Own the IT ticket queue as the primary responder

  • Perform SOC Analyst I responsibilities during available capacity

  • Complete at least one employee onboarding end-to-end independently

  • Demonstrate reliable, professional communication with end users and internal stakeholders; tickets are updated, users are kept informed, and nothing falls through the cracks

• By 180 days:

  • Be the go-to resource for IT operations — the team and end users know you, trust your response time, and the ticket queue is running cleanly with documented procedures you've helped maintain or improve

  • Contribute meaningfully to SOC operations on a regular basis — triaging alerts with sound judgment, escalating the right things, and adding to incident documentation in a way that helps the broader team

  • Demonstrate growing proficiency with at least one SIEM platform and one EDR tool (CrowdStrike, Sophos, or SentinelOne) beyond basic monitoring

  • Draft or improve at least one IT or SOC procedure document that gets adopted

Why You'll Love Working Here

• Comprehensive medical, dental, and vision coverage, the company covers 100% of employee premiums and 90% of dependent premiums on base plans

• Unlimited PTO, 7 paid sick days, and 11 paid holidays

• 401(k) with 4% company match after 90 days, immediately vested

• Company‑paid life insurance at 1x annual salary

• Company‑paid Short‑Term Disability (STD) and Long‑Term Disability (LTD) coverage

• $125 monthly home‑office tech stipend for internet, equipment, and other technology needs

• Amazing colleagues, a collaborative environment, and a supportive, growth‑focused culture

Apollo-IS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. Apollo-IS provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

Apollo Information Systems is CJIS (Criminal Justice Information Services) compliant and requires all employees to complete a background check and obtain CJIS certification.