Cybersecurity Analyst New New York, NY

JRM Construction Management, LLC.; New York (NY); On-site; USD 100,000 - 115,000; Full time

Job summary

JRM Construction Management, LLC. is seeking a Cybersecurity Analyst in New York to join a security-forward team.

You will design, implement, and operate modern information security tools while maintaining governance and incident response duties. The ideal candidate will have strong Windows IT administration skills, experience with Azure Entra ID, and hands-on exposure to EDR/SIEM, vulnerability management, and automation.

Qualifications

• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.
• Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools.
• Scripting and automation skills in PowerShell.
• Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS).
• Analytical, collaborative, and adaptable mindset with strong documentation skills.

Responsibilities

• Governance, risk management, and policy enforcement for cybersecurity standards.
• Maintain security risk register and perform risk assessments with remediation.
• Engineer and maintain secure baselines using Windows Server, AD, DNS, Group Policy, and PowerShell.
• Implement identity governance, privileged access controls, phishing-resistant MFA, and conditional access across Entra ID and IdPs.
• Operate phishing simulations and security awareness programs; respond to incidents with triage and root-cause analysis.
• Design, deploy, and maintain core security platforms (EDR, SIEM, email security, vulnerability management).
• Automate security tasks and response workflows using PowerShell, Python, and SOAR.
• Evaluate new cybersecurity tools and technologies through PoCs and pilots.

Skills

Windows Server

Active Directory

PowerShell scripting

Microsoft 365

Entra ID

SOAR tooling

NIST CSF

Tools

EDR

SIEM

Intune

Vulnerability management

Job description

At JRM Construction, we build more than exceptional spaces - we build talented teams, rewarding careers, and trusted relationships. As a leading employee-owned construction firm, our people take ownership of every project and work collaboratively to deliver outstanding quality and a positive client experience. Guided by integrity, teamwork, continuous improvement, and genuine care for our people, JRM provides an environment where employees can grow and help shape the company's long-term success.

Position Overview

We are seeking a Cybersecurity Analyst who combines a strong foundation in Windows-based IT administration with hands-on experience designing, implementing, and operating modern information security tools, alongside a governance-focused mindset. This role is critical to the success of our security operations and will play a key part in evaluating, testing, and deploying emerging technologies and new procedures, ensuring JRM remains proactive in an ever-evolving cybersecurity landscape. The ideal candidate is not only technically proficient but also highly organized, with the ability to manage multiple priorities, maintain detailed documentation, and uphold structured workflows. The Analyst also shares responsibility for incident response.

Reporting directly to the Manager of Information Security, this position offers an exciting opportunity for a security-minded technologist to thrive within a forward-thinking program that values agility, operational excellence, and continuous improvement.

Key Responsibilities

Governance & Risk Management:

• Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures.
• Support alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls.
• Maintain the security risk register and perform technical risk assessments and drive remediation to closure.
• Leverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines.
• Work with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment.
• Deploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools.

Identity Security & Access Management:

• Implement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs.
• Automate and improve lifecycle management processes, including secure onboarding and offboarding.

Phishing Defense & Awareness:

• Operate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness.
• Triage user-reported phishing attempts and maintain IT communication templates and user education content.

Security Engineering & Tooling:

• Design, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management.
• Maintain configuration baselines and documentation for deployed security tools.
• Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort.
• Run vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams.

Detection, Incident Response & Automation:

• Monitor SIEM alerts and dashboards, and tune detections to reduce noise.
• Act as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned.
• Support incident response playbooks and tabletop exercises.
• Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms.

Innovation & Emerging Technology Evaluation:

• Participate in research, testing, and proof-of-concept (PoC) efforts for new cybersecurity tools, technologies, and frameworks.
• Deploy new technologies and procedures that improve detection, prevention, and governance.
• Provide technical input and analysis for tool evaluations, pilots, and strategic initiatives.

Qualifications

Required:

• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.
• Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools.
• Scripting and automation skills in PowerShell.
• Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS).
• Analytical, collaborative, and adaptable mindset with strong documentation skills.

Preferred:

• Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions.
• Exposure to SIEM detection engineering and SOAR or automation platforms.
• Experience in risk assessments, audit preparation, or compliance reporting.
• Familiarity with Python, SQL, or Bash/Shell for automation and security analysis.

Salary Information

To the extent this position is performed in New York City, the annual salary range for this role is $100,000 - $115,000.

All qualified applicants will receive consideration for employment at JRM without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristics protected by law.

The salary range listed in job postings reflects the Company's good-faith estimate at the time of posting. Actual compensation may vary based on factors such as position tier, geographic location, work experience, market conditions, education/training, and skills.

For more information on how JRM Construction Management collects and uses your personal information, reference our Privacy Policy .