• 2–4 years experience, intermediate level (explicitly avoid entry-level and avoid 10-year veterans unless deliberately stepping down) • General InfoSec familiarity • ServiceNow experience (core ticketing) • Strong written/verbal communication — coordinates with IT teams via Slack, email, Zoom • Data analysis / Excel — some remediation tracking happens via spreadsheet, not just ServiceNow |