Security & Compliance Analyst

Davis Standard; Chicago (IL); On-site; USD 110,000 - 150,000; Full time

Job summary

Davis-Standard is seeking an experienced Cybersecurity Specialist to protect our global information systems, cloud platforms, and manufacturing technology environments. You will investigate incidents, coordinate response with SOC partners, and drive vulnerability management and security engineering initiatives across the enterprise.

You will work with infrastructure, application, and business teams, contribute to Zero Trust efforts, support audits, and develop security standards, baselines, and

Qualifications

• 5+ years of cybersecurity, systems administration, security operations, or infrastructure security experience.
• Experience investigating security incidents and conducting root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as the primary technical escalation point for alerts from managed SOC providers and internal monitoring systems.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident review activities.
• Improve detection capabilities through tuning, rule development, and operational process improvements.
• Own technical vulnerability management processes including prioritization, risk assessment, remediation guidance, validation, and exception review.
• Partner with infrastructure, application, and business teams to reduce organizational risk.
• Review vulnerability trends and provide remediation recommendations.
• Assist with penetration testing, security assessments, and remediation planning.
• Deploy, maintain, and improve cybersecurity technologies including Identity and Access Management, Email Security, Network Security Controls, Security Monitoring Platforms.
• Develop and maintain security standards, baselines, and technical controls.
• Participate in Zero Trust and security architecture initiatives.
• Support security audits, assessments, compliance initiatives, and evidence validation.
• Assist with policy development and control implementation.
• Contribute to risk assessments, vendor security reviews, and security governance activities.
• Review escalated investigations and provide technical direction.
• Maintain incident response procedures, runbooks, and investigation standards.
• Provide security metrics, reporting, and recommendations to leadership.

Skills

Incident response

Threat analysis

Security operations

Communication

Forensics

Tools

CrowdStrike

Microsoft Defender Security Stack

Zscaler

SIEM

Entra ID

Job description

Davis-Standard is a global leader in extrusion and converting technology, with manufacturing, service, and customer support operations spanning North America, Europe, Asia, and South America.

We are seeking an experienced Cybersecurity Specialist to support and enhance the security of Davis-Standard's global information systems, cloud platforms, network infrastructure, and manufacturing technology environments. This role serves as a technical cybersecurity resource responsible for advanced investigation, incident response coordination, vulnerability management, security engineering initiatives, and continuous improvement of the company's security posture.

The Cybersecurity Specialist partners closely with infrastructure teams, regional IT teams, managed security providers, business stakeholders, and the India-based Security Operations Analyst to identify, investigate, remediate, and prevent cybersecurity risks across the organization.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as the primary technical escalation point for alerts generated by managed SOC providers and internal monitoring systems.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident review activities.
• Improve detection capabilities through tuning, rule development, and operational process improvements.
• Own technical vulnerability management processes including prioritization, risk assessment, remediation guidance, validation, and exception review.
• Partner with infrastructure, application, and business teams to reduce organizational risk.
• Review vulnerability trends and provide remediation recommendations.
• Assist with penetration testing, security assessments, and remediation planning.
• Deploy, maintain, and improve cybersecurity technologies including:
• Identity and Access Management
• Email Security
• Network Security Controls
• Security Monitoring Platforms
• Develop and maintain security standards, baselines, and technical controls.
• Participate in Zero Trust and security architecture initiatives.
• Support security audits, assessments, compliance initiatives, and evidence validation.
• Assist with policy development and control implementation.
• Contribute to risk assessments, vendor security reviews, and security governance activities.
• Review escalated investigations and provide technical direction.
• Maintain incident response procedures, runbooks, and investigation standards.
• Provide security metrics, reporting, and recommendations to leadership.

Qualifications

Required

• 5+ years of cybersecurity, systems administration, security operations, or infrastructure security experience.
• Experience investigating security incidents and conducting root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.
• Strong communication, analytical, and documentation skills.

Preferred

• CrowdStrike
• Microsoft Defender Security Stack
• Zscaler
• SIEM platforms
• Manufacturing or industrial environments
• Security+, CySA+, CISSP, GSEC, SC-200, SC-300, AZ-500, or equivalent certifications

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.