Security Analyst: Cloud & Incident Response

BCC Software; Pittsford Township (MI); À distance; USD 90 000 - 130 000; Plein temps

Résumé du poste

BCC Software is seeking a Security Analyst to reinforce our cybersecurity program. You will define, validate, and report on security controls to protect assets and reduce cyber risk, leveraging frameworks and audits.

IT handles day-to-day system administration, while you focus on governance, monitoring, and incident response. You will strengthen identity security, deploy Defender/XDR tools, manage vulnerability programs, and lead incident response.

Qualifications

• 5+ years in cybersecurity operations or equivalent
• Strong understanding of secure network architecture
• Experience with Windows, macOS, Linux
• Hands-on with Microsoft 365 and Azure security
• Reviewing network infrastructure risk posture
• Experience supporting SOC 2 Type II audits
• Familiarity with CSF 2.0 and CIS Controls
• Scripting and automation skills (PowerShell, KQL)
• Able to participate in on-call rotation
• Strong written and verbal communication skills

Responsabilités

• Strengthen identity security using Entra ID, CA, MFA, and PIM
• Deploy and improve Defender XDR, Sentinel, and Intune security capabilities
• Oversee MDR provider with escalations and tuning
• Own vulnerability and exposure management with SLAs and risk reporting
• Lead incident response and maintain playbooks and on-call procedures
• Establish Azure cloud security guardrails and Defender for Cloud
• Manage data protection controls with Microsoft Purview and DLP
• Govern AI usage policy and shadow AI risks
• Manage third-party security risk and vendor assessments
• Manage security ticket workflows and evidence collection
• Create and maintain security documentation and audits
• Align with CSF 2.0, CIS Controls, SOC 2 Type II
• Validate ransomware resilience with backups and tests
• Manage security awareness training across teams
• Back up for network/server/cloud administration
• Assist with security-related budgets and purchases
• Liaise with security/IT teams at partner orgs
• Develop security reports and dashboards for mgmt

Connaissances

Security operations

Written and verbal communication

Incident response

On-call readiness

Scripting (PowerShell)

KQL query skills

Risk reporting

Formation

Security certifications (SC-200, AZ-500, SC-300, CISSP)

NIST CSF 2.0 knowledge

Outils

Microsoft Entra ID

Conditional Access

Defender XDR

Microsoft Sentinel

Microsoft Intune security

Azure Policy

Description du poste

BCC Software is seeking a Security Analyst to reinforce our cybersecurity program. You will define, validate, and report on security controls to protect assets and reduce cyber risk, leveraging frameworks and audits.

IT handles day-to-day system administration, while you focus on governance, monitoring, and incident response. You will strengthen identity security, deploy Defender/XDR tools, manage vulnerability programs, and lead incident response.