Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Support BCC Software’s cybersecurity initiatives by defining, validating, and reporting on security controls.

• Enhance identity security utilizing Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management.

• Integrate, deploy, support, and continuously enhance Microsoft security tools, such as Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security features.

• Oversee the managed detection and response provider, including handling escalations, tuning, and conducting service reviews.

• Take charge of vulnerability and exposure management, including managing remediation SLAs, collecting remediation evidence, and preparing risk reports.

• Lead the incident response efforts and act as the primary security point of contact during incidents.

• Maintain incident response playbooks, escalation procedures, tabletop exercises, and on-call expectations.

• Establish security guardrails for Azure cloud and oversee Defender for Cloud, Azure Policy, and related controls.

• Manage data protection controls through Microsoft Purview sensitivity labeling and data loss prevention measures.

• Enforce the AI Usage Policy and govern risks associated with Microsoft Copilot oversharing, shadow AI, and SaaS discovery.

• Handle third-party and vendor security risks, including conducting due diligence, periodic reviews, evidence collection, and handling customer security questionnaires.

• Oversee security ticket workflows for access reviews and phishing reports.

• Create and maintain security policies, risk registers, incident response documentation, and audit evidence.

• Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations.

• Validate ransomware resilience through immutable backup evidence and regular recovery testing.

• Manage security awareness training and reinforce security policies, controls, monitoring, and best practices across teams.

• Provide backup support for network, server, and cloud administration as necessary.

• Assist with security-related budgets and purchasing decisions.

• Collaborate with security and IT professionals at BlueCrest and Platinum.

• Develop and manage security reports and dashboards for management review.

⛳️ Requirements

• Over 5 years of experience in cybersecurity operations or equivalent experience.

• Strong comprehension of secure network architecture and networking principles.

• Proficient with Windows, macOS, and Linux operating systems.

• Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.

• Ability to assess the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls.

• Experience in supporting SOC 2 Type II audits, encompassing control validation and evidence collection.

• Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.

• Proficient in PowerShell scripting and KQL query skills for security operations, investigations, and automation.

• Capable of responding promptly to critical issues and willing to partake in an on-call rotation.

• Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risks, and communicate requirements to both technical and business stakeholders.

• Understanding of adversary tactics and tools (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) adequate for detection, hunting, and validating controls.

• One or more relevant security certifications are preferred, such as Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP.

• Must be eligible to work within the United States.

• Full-time, exempt availability; standard hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with flexibility for other U.S. time zones.

• Willingness to engage in periodic evening and weekend work.

🏝️ Benefits

• Occasional travel to data center facilities, customer sites, or BCC Software headquarters.

• Flexibility in time zones for employees based in other parts of the U.S.

• Participation in an on-call rotation with clearly defined after-hours response obligations.

• Opportunities for periodic evening and weekend work for planned maintenance, security testing, and incident response.