Security Analyst

This is a fully remote position, open to applicants in New York.

📋 Description

• Define, validate, and report on security measures to safeguard company assets and sensitive data while mitigating cyber risks.

• Enhance identity security by utilizing Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and PIM.

• Integrate, deploy, support, and refine Microsoft security tools such as Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security features.

• Oversee the managed detection and response provider, including handling escalations, tuning, and conducting service reviews.

• Manage vulnerability and exposure assessments, set remediation SLAs, verify evidence, and analyze risk trends.

• Lead incident response efforts and act as the primary security liaison during incidents.

• Maintain incident playbooks, escalation protocols, tabletop exercises, and on-call responsibilities.

• Establish security guardrails for Azure cloud and supervise Defender for Cloud, Azure Policy, and associated controls.

• Oversee Microsoft Purview sensitivity labeling and data loss prevention mechanisms.

• Enforce the AI Usage Policy and manage risks associated with Microsoft Copilot oversharing, shadow AI, and SaaS discovery.

• Oversee third-party and vendor security risks, due diligence, periodic reviews, evidence gathering, and customer security questionnaires.

• Manage security ticket workflows for access reviews and phishing incidents.

• Develop and sustain security policies, a risk register, incident response documentation, and audit evidence.

• Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations.

• Validate ransomware resilience through immutable backup evidence and regular recovery testing.

• Administer security awareness training and promote security policies, controls, monitoring, and best practices across teams.

• Provide backup support for network, server, and cloud administration as necessary.

• Assist with security-related budgeting and procurement.

• Collaborate with security and IT professionals at BlueCrest and Platinum.

• Develop and manage security reports and dashboards for management review.

⛳️ Requirements

• 5+ years of experience in cybersecurity operations or a comparable background.

• Strong grasp of secure network architecture and networking fundamentals.

• Proficient in Windows, macOS, and Linux operating systems.

• Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.

• Ability to evaluate the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls.

• Experience in supporting SOC 2 Type II audits, encompassing control validation and evidence gathering.

• Familiarity with the NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

• Proficient in PowerShell scripting and KQL query skills for security operations, investigations, and automation.

• Capacity to respond promptly to critical issues and willingness to participate in an on-call rotation.

• Excellent written and verbal communication skills, including defining security SLAs, evaluating evidence, reporting risks, and conveying requirements to both technical and business stakeholders.

• Understanding of adversary tactics and tools (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient for detecting, hunting, and validating controls.

• One or more relevant security certifications preferred, such as SC-200, AZ-500, SC-300, or CISSP.

• Ability to work Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with flexibility for other U.S. time zones.

• Willingness to perform occasional evening and weekend work for maintenance, security testing, and incident response.

🏝️ Benefits

• Remote work allowed from any location within the United States.

• Time zone flexibility for employees situated in different areas of the U.S.

• Full-time exempt role.

• Participation in an on-call rotation with clearly defined after-hours response expectations.

• Commitment to equal employment opportunities and reasonable accommodations.