Security & Compliance Analyst

Davis-Standard; Chicago (IL); On-site; USD 110,000 - 160,000; Full time

Job summary

Davis-Standard is seeking a Cybersecurity Specialist to safeguard our global information systems, cloud platforms, and manufacturing tech environments. You will lead incident response, coordinate with SOC providers, and drive vulnerability management and security engineering initiatives.

The role partners with infrastructure teams, regional IT teams, and business stakeholders to reduce organizational risk and improve security posture across our global operations.

Qualifications

• 5+ years in cybersecurity, systems administration, security operations, or infrastructure security.
• Experience investigating security incidents and performing root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.
• Strong communication, analytical, and documentation skills.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as primary technical escalation for SOC alerts and internal monitoring.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident reviews.
• Improve detection capabilities through tuning, rules, and process improvements.
• Maintain incident response procedures, runbooks, and investigation standards.

Skills

Cybersecurity experience

Incident response

Microsoft 365 security

Entra ID

Endpoint security

Communication & documentation

Education

Security certifications (see list)

Tools

CrowdStrike

Microsoft Defender Security Stack

Zscaler

SIEM platforms

Job description

Davis-Standard is a global leader in extrusion and converting technology, with manufacturing, service, and customer support operations spanning North America, Europe, Asia, and South America.

We are seeking an experienced Cybersecurity Specialist to support and enhance the security of Davis-Standard's global information systems, cloud platforms, network infrastructure, and manufacturing technology environments. This role serves as a technical cybersecurity resource responsible for advanced investigation, incident response coordination, vulnerability management, security engineering initiatives, and continuous improvement of the company's security posture.

The Cybersecurity Specialist partners closely with infrastructure teams, regional IT teams, managed security providers, business stakeholders, and the India-based Security Operations Analyst to identify, investigate, remediate, and prevent cybersecurity risks across the organization.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as the primary technical escalation point for alerts generated by managed SOC providers and internal monitoring systems.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident review activities.
• Improve detection capabilities through tuning, rule development, and operational process improvements.
• Own technical vulnerability management processes including prioritization, risk assessment, remediation guidance, validation, and exception review.
• Partner with infrastructure, application, and business teams to reduce organizational risk.
• Review vulnerability trends and provide remediation recommendations.
• Assist with penetration testing, security assessments, and remediation planning.
• Deploy, maintain, and improve cybersecurity technologies including:
• Identity and Access Management
• Email Security
• Network Security Controls
• Security Monitoring Platforms
• Develop and maintain security standards, baselines, and technical controls.
• Participate in Zero Trust and security architecture initiatives.
• Support security audits, assessments, compliance initiatives, and evidence validation.
• Assist with policy development and control implementation.
• Contribute to risk assessments, vendor security reviews, and security governance activities.
• Review escalated investigations and provide technical direction.
• Maintain incident response procedures, runbooks, and investigation standards.
• Provide security metrics, reporting, and recommendations to leadership.

Qualifications

Required

• 5+ years of cybersecurity, systems administration, security operations, or infrastructure security experience.
• Experience investigating security incidents and conducting root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.
• Strong communication, analytical, and documentation skills.

Preferred

• CrowdStrike
• Microsoft Defender Security StackZscaler
• SIEM platforms
• Manufacturing or industrial environments
• Security+, CySA+, CISSP, GSEC, SC-200, SC-300, AZ-500, or equivalent certifications