IT Security Analyst

Re:Build Manufacturing; Framingham (MA); On-site; USD 83,000 - 132,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Retirement plan

Paid time off

Job summary

Re:Build Manufacturing is seeking a security engineer to defend against cyber threats with emphasis on malware and vulnerability incidents, leveraging Microsoft Defender, Purview, and Sentinel.

The role requires hands-on threat detection, incident response, and ongoing improvement of security posture in a dynamic manufacturing environment. Ideal candidates hold a bachelor's in IT/cybersecurity and 3–5 years of relevant experience with Microsoft security products, plus travel readiness.

Qualifications

• Bachelor's degree or equivalent experience in IT/cybersecurity.
• 3–5 years of experience with Microsoft Defender, Purview and Sentinel.
• Certifications such as SC-100/200/300/400, Security+/CySA+/SecurityX, GSEC/GCIH are preferred.
• Willingness to travel domestically up to 10%.

Responsibilities

• Monitor security alerts, dashboards, and logs across Microsoft Defender, Purview, and Sentinel to detect and respond to incidents.
• Manage and optimize Defender policies and deployments across the enterprise.
• Develop and maintain custom detection rules and alerts in security platforms.
• Respond to security incidents with containment, eradication, and recovery steps.
• Document incident response activities and perform root-cause analysis.

Skills

Analytical skills

Organizational skills

Communication skills

Interpersonal skills

Education

Bachelor's degree in IT/cybersecurity

Tools

Microsoft Defender

Microsoft Purview

Microsoft Sentinel

Microsoft Defender XDR

Job description

About Re:Build Manufacturing

Re:Build Manufacturing is a growing family of industrial and engineering businesses focused on building a next‑generation manufacturing enterprise in America.

Who we are looking for

This role is instrumental in defending Re:Build against sophisticated cyber threats, with a main focus on mitigating malware/virus and software vulnerability‑related incidents, specifically leveraging Microsoft Defender, Purview, and Sentinel, and a solid background in threat detection, incident response, and the Microsoft security suite. This role requires a blend of technical expertise, analytical skills, and a proactive approach to continually improve our security posture.

What you get to do

• Monitor security alerts, dashboards, and logs across the Microsoft Defender suite (Endpoint, Identity, Cloud Apps, Vulnerability Management, etc.), Microsoft Purview, and Microsoft Sentinel to detect and respond to potential security incidents and track and prioritize vulnerability remediation.
• Manage and optimize Microsoft Defender security policies, configurations, and deployment across the enterprise environment.
• Utilize Microsoft Purview capabilities (e.g., Data Loss Prevention, eDiscovery) to enforce compliance policies and protect sensitive data.
• Develop and maintain custom detection rules and alerts within the security platforms to address emerging threats.
• Serve as a primary responder for security incidents, with a specific focus on malware, viruses, and other endpoint compromises, performing forensic analysis, containment, eradication, and recovery steps during active incidents.
• Conduct root‑cause analysis for security incidents and implement necessary corrective and preventive measures.
• Document all incident response activities, findings, and lessons learned to continuously improve the IR process.
• Analyze threat intelligence to identify potential risks and vulnerabilities relevant to the organization.
• Proactively hunt for threats across the environment using tools like Microsoft Defender XDR.
• Develop and implement strategies to defend against prevalent malware types (e.g., ransomware, spyware, trojans).
• Stay ahead of the latest cybersecurity trends, attack techniques, and adversary tactics.
• Provide regular reports on the organization's security posture, incident metrics, and platform performance.
• Collaborate with IT and other departments to implement security best practices and system hardening across the infrastructure.
• Assist in the development and delivery of cybersecurity awareness training for employees.

What you bring to the Team

• A bachelor's degree in information technology, cybersecurity, related field, or equivalent experience.
• Relevant cybersecurity certifications (e.g., Microsoft SC-100/200/300/400, CompTIA Security+/CySA+/SecurityX, GIAC GSEC/GCIH).
• 3‑5 years of demonstrated experience managing, configuring, and utilizing Microsoft Defender, Purview, and Sentinel.
• Experience supporting aerospace and defense organizations subject to CMMC residing in Microsoft 365 GCC High preferred.
• Strong analytical skills, attention to detail, and ability to provide clarity in complex, unprecedented or ambiguous environments.
• Strong organizational, communication and interpersonal skills with the ability to guide and influence technical teams.
• Proficiency with compliance tracking tools, GRC platforms, and project management tools a plus.
• Willingness to travel domestically up to 10%, depending on business needs.
• To conform to U.S. Government technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C 1324b(a)(3), or eligible to obtain the required authorizations from the U.S.

Compensation and Benefits

The base salary range for this position is $83,000 – $132,000 per year. This range represents the Company’s good faith estimate of the base compensation for this role at the time of posting. Actual compensation will be determined based on several factors, including but not limited to relevant experience, skills, qualifications, internal equity, and geographic location. In addition to base salary, this role may be eligible for annual incentive compensation and/or long‑term incentives, subject to Company plans. The Company offers a comprehensive benefits package including medical, dental, vision, retirement, paid time off, and other benefits.

The BIG payoff

We are a company who is going to make a difference in the industries and the communities in which we choose to operate.

Equity and Inclusion

Every employee of Re:Build will share ownership in the company and will share in the financial rewards of the success we achieve together, at all levels of the company!

Equal Employment Opportunity Statement and Accommodations

Re:Build Manufacturing is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based upon race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, marital status, parental status, cultural background, organizational level, work styles, tenure and life experiences. Or for any other reason.

Re:Build is committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at [e-mail] or call us at 617.909.6275.