Security Analyst

Bonney Forge Corporation; Houston (TX); On-site; USD 75,000 - 110,000; Full time

Job summary

Bonney Forge Corporation is seeking a Security Analyst to lead day-to-day implementation, monitoring, analysis, and maintenance of cybersecurity controls across the organization. You will support identity and access management, endpoint and network security, vulnerability management, security monitoring, incident response, and compliance.

The role collaborates with IT teams to improve security posture, respond to incidents, participate in audits against NIST, CMMC, and ISO standards, and drive

Qualifications

• Bachelor's degree or equivalent technical experience in cybersecurity/IT.
• 3–5 years IT experience, preferably with systems, networking, Microsoft 365, or security responsibilities.
• 1–3 years direct information-security experience preferred.
• Relevant certifications preferred, such as CompTIA Security+, CySA+, Microsoft SC-200/SC-300/SC-400.

Responsibilities

• Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
• Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
• Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
• Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
• Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
• Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
• Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
• Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
• Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
• Maintain security documentation, incident records, technical procedures, and remediation tracking.

Skills

Security Operations

Incident Response

Threat Detection

Splunk SIEM

Microsoft Entra ID

Microsoft Defender

Microsoft Purview

CrowdStrike Falcon

Identity Access

Vulnerability Management

Risk Assessment

Security Auditing

NIST 800-171

CMMC

ISO 27001

Network Security

Firewall VPN

Root Cause Analysis

Technical Documentation

Security Awareness

Education

Bachelor's degree in Cybersecurity, IT, Computer Science, Information Systems, or related field

Job description

Role Summary

The Security Analyst is responsible for the day-to-day implementation, monitoring, analysis, and maintenance of the organization's cybersecurity controls. This role supports identity and access management, endpoint and network security, vulnerability management, security monitoring, incident response, compliance, and security awareness.

Key Responsibilities

• Monitor and investigate security events, alerts, and incidents across endpoints, networks, Microsoft 365, cloud environments, and security platforms.
• Respond to cybersecurity incidents, including phishing attempts, malware infections, compromised accounts, and unauthorized access events.
• Administer and maintain security technologies including Splunk SIEM, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, and CrowdStrike Falcon.
• Manage identity and access security through MFA, Conditional Access, privileged access reviews, and least-privilege practices.
• Conduct vulnerability assessments, prioritize remediation efforts, and coordinate corrective actions with infrastructure and application teams.
• Support security governance, risk management, compliance initiatives, audits, and security assessments related to NIST, CMMC, and ISO standards.
• Monitor and enhance Microsoft 365 security controls, data protection programs, email security, and information governance requirements.
• Assist with network and infrastructure security reviews, hardening efforts, and secure configuration management.
• Contribute to employee security awareness programs, phishing simulations, and cybersecurity communications.
• Maintain security documentation, incident records, technical procedures, and remediation tracking.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field, or equivalent relevant technical experience.
• 3 to 5 years of IT experience, preferably including systems, networking, Microsoft 365, or cybersecurity responsibilities.
• 1 to 3 years of direct information-security experience preferred.
• Relevant certifications preferred, such as CompTIA Security+, CySA+, Microsoft SC-200, SC-300, or SC-400.

Key Skills: Security Operations, Incident Response, Threat Detection, Splunk SIEM, Microsoft Entra ID, Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Identity and Access Management, Vulnerability Management, Risk Assessment, Security Auditing, NIST SP 800-171, CMMC, ISO 27001 Compliance, Network Security, Firewall and VPN Administration, Root Cause Analysis, Technical Documentation, Security Awareness Training, Technical Writing and Root-cause analysis.