Security Analyst

Ariens Company; Wisconsin; On-site; USD 85,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k) match

Life Insurance

Paid holidays

Tuition Reimbursement

Job summary

Ariens Company in Brillion, WI is seeking a Security Analyst to protect our information systems and support the day-to-day operations of our information security program. You will manage vulnerabilities, perform monthly patching, respond to security alerts, administer security tools, and participate in security awareness initiatives.

The ideal candidate has a degree in a related field, at least 3 years in IT with 2 years in security operations, and hands-on experience with AD/Entra ID, M365,

Qualifications

• Degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Information Systems, Computer or Network Engineering, Information Technology, or a closely related field is preferred.
• Minimum of 3 years of hands-on experience in information technology, with at least 2 years in a security operations capacity.
• Experience in vulnerability management, patch management, or security alert triage and incident handling.
• System and application administration experience in a Microsoft environment, including Active Directory and Entra ID, Microsoft 365, Microsoft Defender, and Intune.
• Working knowledge of a scripting language for automation and reporting; PowerShell or Python preferred.
• Working knowledge of a recognized security control framework such as the NIST Cybersecurity Framework or the CIS Critical Security Controls.
• Demonstrated organization, documentation, and written communication skills, including the ability to explain security requirements to non-technical staff.
• Experience in a manufacturing environment, including exposure to operational technology (OT) and non-IT-managed assets preferred.

Responsibilities

• Triage and classify vulnerabilities identified across vulnerability management, attack surface, and threat intelligence feeds.
• Coordinate remediation with system owners and verify closure.
• Run vendor-provided assessment and evaluation tools to identify vulnerabilities, misconfigurations, and control gaps.
• Perform initial analysis of the results and route findings for remediation.
• Execute the monthly patch cycle for servers and workstations, investigate and resolve patch failures, and report on patch compliance.
• Perform first-line triage of security alerts escalated by the managed detection and response provider.
• Administer and maintain security software, including endpoint protection, email security, identity protection, and logging and monitoring tools.
• Apply configuration changes and tune detections under established standards.
• Run the security awareness program, including training assignment and completion tracking, phishing and social engineering simulations, and reporting of results.
• Perform email quarantine review and release, and investigate reported phishing and social engineering attempts.
• Conduct periodic user access reviews, verify offboarding and access revocation, and maintain the security exception and risk acceptance log.
• Gather information and produce control evidence across systems in support of audits, cyber insurance applications, customer security questionnaires, and other business requests.
• Apply and help enforce enterprise security policies, standards, procedures, and baselines, and recommend updates based on operational experience.
• Maintain current knowledge of information security practices, tools, frameworks, and attack and threat trends, and recommend practical improvements.
• Create and maintain security incident reports, runbooks, and operational documentation.
• Provide rotating on-call support and contribute to root cause analysis.
• Other duties as assigned

Skills

Vulnerability management

Patch management

Security incident triage

Automation scripting

Communication

Education

Bachelor's degree in Information Security or related field

Tools

Active Directory

Entra ID

Microsoft 365

Microsoft Defender

Intune

PowerShell

Python

Job description

Security Analyst### Security AnalystApply: WI - Brillion: Full time: Posted Today: R-04262At AriensCo, we build more than exceptional products – we create opportunities that impact careers. Our culture values innovative thinking, hard work and determination. We interact in teams, collaborate together and make decisions quickly.We see growth potential in every team member, and are committed to supporting our employees with continuous training and advancement opportunities. Our environment? We’re corporate, without being “corporate.” Whether you work at our headquarters, manufacturing facilities, or one of our global distribution businesses, you’ll always have the freedom to create and contribute. Our company vision is “Passionate People, Astounded Customers.” Quite simply: it revolves around people Speaking of people, you’re not just employee #1,762 to us. You’re family and your role is invaluable. Without exceptional people, we can’t continue to produce the amazing products we're known for around the world. Ready for the ride of your career? Then come join us. By joining our team, you'll have the opportunity to work in a rewarding workplace with a strong sense of community.# **Job Description:** Ariens Company is seeking a motivated Security Analyst to join our team in Brillion, WI! In this role, you’ll play an important part in protecting our systems and information by supporting the day-to-day operations of our information security program. You’ll manage vulnerabilities through resolution, execute monthly patching, respond to escalated security alerts, administer security tools, support security awareness initiatives, conduct access reviews, and help ensure security controls are working effectively. This is a great opportunity for someone who enjoys problem-solving, cybersecurity, and making a meaningful impact on an organization’s security posture. **THE DAY TO DAY...** * Triage and classify vulnerabilities identified across vulnerability management, attack surface, and threat intelligence feeds* Coordinate remediation with system owners and verify closure* Run vendor-provided assessment and evaluation tools to identify vulnerabilities, misconfigurations, and control gaps.* Perform initial analysis of the results and route findings for remediation* Execute the monthly patch cycle for servers and workstations, investigate and resolve patch failures, and report on patch compliance* Perform first-line triage of security alerts escalated by the managed detection and response provider. Investigate and resolve routine incidents, and escalate confirmed or high-severity incidents to senior staff* Administer and maintain security software, including endpoint protection, email security, identity protection, and logging and monitoring tools* Apply configuration changes and tune detections under established standards* Run the security awareness program, including training assignment and completion tracking, phishing and social engineering simulations, and reporting of results* Perform email quarantine review and release, and investigate reported phishing and social engineering attempts* Conduct periodic user access reviews, verify offboarding and access revocation, and maintain the security exception and risk acceptance log* Gather information and produce control evidence across systems in support of audits, cyber insurance applications, customer security questionnaires, and other business requests* Apply and help enforce enterprise security policies, standards, procedures, and baselines, and recommend updates based on operational experience* Maintain current knowledge of information security practices, tools, frameworks, and attack and threat trends, and recommend practical improvements* Create and maintain security incident reports, runbooks, and operational documentation* Provide rotating on-call support and contribute to root cause analysis* Other duties as assigned **THE QUALIFICATIONS...** * Degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Information Systems, Computer or Network Engineering, Information Technology, or a closely related technical field is preferred* Minimum of 3 years of hands-on experience in information technology, with at least 2 years in a security operations capacity* Experience in vulnerability management, patch management, or security alert triage and incident handling* System and application administration experience in a Microsoft environment, including Active Directory and Entra ID, Microsoft 365, Microsoft Defender, and Intune* Working knowledge of a scripting language for automation and reporting; PowerShell or Python preferred* Working knowledge of a recognized security control framework such as the NIST Cybersecurity Framework or the CIS Critical Security Controls* Demonstrated organization, documentation, and written communication skills, including the ability to explain security requirements to non-technical staff* Experience in a manufacturing environment, including exposure to operational technology (OT) and non-IT-managed assets preferred* Ability to work independently on recurring responsibilities and to recognize when to escalate Applicants must be authorized to work in the U.S. without requiring sponsorship now or in the future.## ***About AriensCo***Since 1933, the AriensCo name has been associated with reliable, durably crafted, high-performance outdoor power equipment. Our core values – **Be Honest, Be Fair, Respect the Individual, Keep our Commitments, and Encourage Intellectual Curiosity** define our culture and inspire our team. We believe passionate people and astounded customers lead to unstoppable success. Our employees’ quality of life is important to us. When people feel appreciated, respected and supported, careers thrive and ideas come to fruition. AriensCo employees are provided various great benefit opportunities which may include:* Medical, Dental, Vision Insurance effective first day of employment* Dependent Care Flexible Spending Account (FSA) plan* 401(k) match and profit-sharing plans* Life Insurance* Health Savings Accounts (HSA)* Short Term Disability* Parental Leave* Onsite Marketplace Care Partners at all locations* Paid holidays* Employee Assistance Program* Tuition Reimbursement and Apprenticeship Programs* Safety shoes and safety prescription glasses reimbursement* Employee Product Purchase Program* 50% Daycare discount \\*\\*Brillion Early Learning Center* 10% tuition discount at KinderCare Learning Centers nationwide \\*\\*Excludes Brillion Early Learning Center* Onsite health clinic with Bellin Health \\*\\*Brillion Campus Only* Nearsite & Urgent Care Clinic Options \\*\\*Brillion Campus Only## ***EEO Statement***The concept of diversity is important to us at AriensCo. That’s why we’ve created a culture that is inclusive, accepting and understanding. We embrace diversity among our partners, suppliers and employees. We also strive for diversity in the quality of our ideas. Inclusion and acceptance means that, regardless of who you are, you will always be standing on our welcome mat.AriensCo is an Equal Employment Opportunity (EEO) employer and steadfastly committed to hiring and selecting the most qualified candidate for any open position. It is the policy of AriensCo to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.Providing our employees with an environment free of discrimination and harassment is something we take very seriously. Embracing diversity enables us to attract the best qualified talent, foster productive teamwork, and expand our business opportunities.### About UsBased in Brillion, Wis., AriensCo is a privately-owned and operated corporation focused on outdoor products that serve the needs of both consumer and professional customers. Established in 1933, the company manufactures outdoor power equipment under the Ariens and Gravely brands.Applicants have rights under Federal Employment Laws:* EEO is the Law* EEO is the Law (Spanish)* Federal Family Medical Leave* Employee Polygraph Protection Act* Right to Work* Right to Work (Spanish)* This Employer Participates in E-Verify**If you would like assistance applying at AriensCo, please feel free to visit us at our corporate headquarters, located at 655 West Ryan Street in Brillion, WI.**