Analyst II, Information Security

Scorpion Therapeutics; Madison (WI); On-site; USD 80,000 - 100,000; Full time

Job summary

Scorpion Therapeutics in Madison, WI is seeking an Information Security Analyst to design, implement, and maintain secure endpoint baselines using Intune or Defender. You will enforce configuration and compliance while partnering with IT operations to reduce risk and improve security posture.

The role requires 3+ years in information security and hands-on EDR experience, with strong analytical and communication skills. Exposure to regulated environments and MDM/MAM policies is preferred.

Qualifications

• Bachelor's degree in Information Security/IT/CS or related field, or equivalent practical experience.
• 3+ years in information security, system administration, help desk, or similar roles.
• Exposure to MDM/MAM policies for Windows/macOS/iOS/Android.
• Hands-on experience administering EDR (Microsoft Defender, CrowdStrike Falcon, SentinelOne).
• Experience in a regulated industry environment.
• Strong analytical/problem‑solving skills; investigate alerts and interpret audit logs.
• Excellent written/verbal communication; explain technical concepts to non‑technical stakeholders.

Responsibilities

• Create secure endpoint configuration baselines via Group Policy or Intune based on NIST/CIS (etc.).
• Triage security alerts and elevate as necessary.
• Create, test, and deploy conditional access policies.
• Create, maintain, and troubleshoot firewall security policies.
• Participate in regular audits to ensure compliance with company policies and applicable laws.
• Standardize and enforce Intune compliance policies, device configuration profiles, and remediation scripts.
• Coordinate with IT to minimize user friction while maximizing control (test rings, staged rollouts, rollback plans).
• Monitor endpoint configuration compliance and remediate drift.
• Contribute to Microsoft Entra ID hardening: Conditional Access, MFA, device compliance gates, role-based access, Privileged Identity Management (PIM).
• Use PowerShell and/or Intune remediation scripts to automate tasks and drift checks.
• Maintain documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.

Skills

Analytical thinking

Problem solving

Communication

Education

Bachelor's degree in Information Security/IT/CS or related field

Tools

Intune

Microsoft Defender

CrowdStrike Falcon

SentinelOne

PowerShell

Group Policy

MDM

SIEM

Job description

The Position

We're seeking an Information Security Analyst with expertise in Microsoft Intune, or Defender, to design, implement, and maintain secure endpoint baselines, enforce configuration and compliance, and partner with IT operations to reduce risk and improve the security posture.

Responsibilities

• Create secure endpoint configuration baselines via Group Policy or Intune based on NIST/CIS (etc.).
• Triage security alerts and elevate as necessary.
• Create, test, and deploy conditional access policies.
• Create, maintain, and troubleshoot firewall security policies.
• Participate in regular audits to ensure compliance with company policies and applicable laws.
• Standardize and enforce Intune compliance policies, device configuration profiles, and remediation scripts.
• Coordinate with IT to minimize user friction while maximizing control (test rings, staged rollouts, rollback plans).
• Monitor endpoint configuration compliance and remediate drift.
• Contribute to Microsoft Entra ID hardening: Conditional Access, MFA, device compliance gates, role-based access, Privileged Identity Management (PIM).
• Use PowerShell and/or Intune remediation scripts to automate tasks and drift checks.
• Maintain documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.

Requirements

• Bachelor's degree in Information Security/IT/CS or related field, or equivalent practical experience.
• 3+ years in information security, system administration, help desk, or similar roles.
• Exposure to MDM/MAM policies for Windows/macOS/iOS/Android.
• Hands-on experience administering EDR (Microsoft Defender, CrowdStrike Falcon, SentinelOne).
• Experience in a regulated industry environment.
• Strong analytical/problem‑solving skills; investigate alerts and interpret audit logs.
• Excellent written/verbal communication; explain technical concepts to non‑technical stakeholders.

Preferred

• OT/manufacturing cybersecurity experience; Dragos OT security.
• Relevant certifications.
• Pharmaceutical/biotech/life sciences experience.
• Exposure to SIEM, EDR platforms, and identity/access management.
• Intune device configuration/MDM policy experience.
• GxP environment experience.

Wisconsin pay range: $80,000 USD - $100,000 USD.

Candidates must have current, valid authorization to work in the country where this role is located.