Role Description Sun Com Mobile is seeking a reliable, detail-oriented Overnight Facilities Coordinator / Security Monitoring & Dispatch Specialist to support operations during overnight hours. This role is critical to maintaining the safety, security, and functionality of our retail locations nationwide. You'll be the eyes and ears of the company after hours--monitoring systems, responding to alerts, and coordinating real-time support when issues arise. If you're someone who stays sharp overnight, works well independently, and can make quick, sound decisions, this role is for you. What You'll Do - Facilities Coordination - Monitor facility systems and report maintenance or operational concerns - Coordinate emergency repairs or vendor support as needed - Maintain accurate logs of incidents, service requests, and follow-ups - Security Monitoring - Monitor CCTV systems across multiple locations in real time - Identify suspicious activity, safety concerns, or policy violations - Escalate issues quickly and appropriately - Alarm Monitoring & Dispatch - Monitor intrusion, fire, and environmental alarm systems - Assess alerts and take immediate action - Dispatch internal teams, vendors, or emergency services when necessary - Document all activity clearly and accurately Qualifications - High school diploma or equivalent required - Previous experience in security monitoring, dispatch, call center, or facilities support preferred - Strong attention to detail and ability to multitask - Clear communication and solid judgment under pressure - Comfortable working independently overnight - Basic computer skills (monitoring systems, email, reporting tools) Preferred Experience - CCTV or alarm monitoring systems - Dispatch or call center environment - Facilities maintenance coordination Work Environment - Fully remote role with continuous system monitoring - Requires sustained focus and responsiveness during overnight hours - Minimal supervision--high accountability role Benefits - Be part of a growing Cricket Wireless authorized retailer - Play a key role in protecting company assets and employees - Work independently with real impact on daily operations - Consistent overnight schedule for those who prefer off-hours work Additional Requirements - Must pass background check (where applicable) - Must be available for weekends, holidays, and emergency coverage

• Continuously monitor, triage, and analyze real-time security alerts and log data across disparate platforms. • Serve as the critical operational hinge and escalation pathway between Tier 1/2 SOC analysts and the Incident Response (IR) team. • Execute initial deep-dive log analysis and technical root-cause investigations to reconstruct threat timelines. • Perform proactive behavioral and pattern analysis on historical network and host logs to identify coverage gaps. • Review and update SOC incident response playbooks, internal workflows, and defensive tool tracking mechanisms.

• Take escalations from L1 and perform in-depth investigations: hypothesis-driven analysis, evidence validation, scoping, impact assessment, and timeline building. • Correlate telemetry across endpoint (EDR), Windows/Linux, AD, firewall/proxy/DNS/IDS, and (when applicable) cloud logs. • Recommend and/or coordinate containment actions (host isolation, credential resets, IOC blocks, temporary control changes) following change control and governance. • Determine severity and communicate clearly in English to technical stakeholders; provide concise executive-style updates when required. • Identify detection gaps and drive improvements: reduce false positives, close false negatives, propose new rules/use cases. • Ensure evidence integrity and proper documentation, coordinate handoffs with IR, IT Ops, Network, and Cloud teams. • Produce post-incident deliverables: probable root cause, lessons learned, and preventive actions.

• Monitor security events and alerts in SIEM and defensive tools; perform initial triage and classification (benign / false positive / suspicious / incident). • Collect and review basic evidence: endpoint telemetry, Windows/Linux logs, firewall/IDS, DNS/proxy; perform initial correlation (host/user/IP/IOC/process). • Execute runbooks/playbooks (e.g., password reset request, IOC block request, host isolation request) when authorized and aligned with procedures. • Create and maintain high-quality tickets with a clear narrative: what happened, supporting evidence, potential impact, actions taken, recommended next steps. • Escalate to L2/L3/IR when there is evidence of compromise, material risk, lateral movement, or uncertainty that requires deeper investigation. • Deliver structured shift handovers (case status, findings, hypotheses, next steps, blockers). • Meet operational SLAs and documentation of quality standards.