Security & Compliance Analyst

Davis-Standard,-LLC; Chicago (IL); On-site; USD 120,000 - 160,000; Full time

Job summary

Davis-Standard, LLC is seeking an experienced Cybersecurity Specialist to protect its global information systems, cloud platforms, and manufacturing networks. You will lead investigations, incident response, and security engineering initiatives.

The role partners with infrastructure teams and regional IT groups to reduce risk, improve detection, and drive vulnerability management while supporting audits, zero trust efforts, and security governance.

Qualifications

• 5+ years in cybersecurity, security operations, or related fields.
• Experience investigating security incidents and performing root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, cloud security, and vulnerability management.

Responsibilities

• Investigate and respond to cybersecurity incidents across endpoints, servers, cloud, networks, and manufacturing environments.
• Serve as the primary technical escalation point for alerts from managed SOC providers and internal monitoring systems.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident review activities.
• Improve detection capabilities through tuning, rules, and process improvements.
• Own vulnerability management processes including prioritization, risk assessment, remediation guidance, and exception review.
• Partner with infrastructure, application, and business teams to reduce organizational risk.
• Review vulnerability trends and provide remediation recommendations.
• Assist with penetration testing, security assessments, and remediation planning.
• Develop and maintain security standards, baselines, and technical controls.
• Participate in Zero Trust and security architecture initiatives.
• Support security audits, assessments, and governance activities.

Skills

Incident response

Threat analysis

Microsoft 365 security

Entra ID

Vulnerability management

Tools

CrowdStrike

Microsoft Defender Security Stack

Zscaler

SIEM platforms

Job description

Davis-Standard is a global leader in extrusion and converting technology, with manufacturing, service, and customer support operations spanning North America, Europe, Asia, and South America.

We are seeking an experienced Cybersecurity Specialist to support and enhance the security of Davis-Standard's global information systems, cloud platforms, network infrastructure, and manufacturing technology environments. This role serves as a technical cybersecurity resource responsible for advanced investigation, incident response coordination, vulnerability management, security engineering initiatives, and continuous improvement of the company's security posture.

The Cybersecurity Specialist partners closely with infrastructure teams, regional IT teams, managed security providers, business stakeholders, and the India-based Security Operations Analyst to identify, investigate, remediate, and prevent cybersecurity risks across the organization.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as the primary technical escalation point for alerts generated by managed SOC providers and internal monitoring systems.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident review activities.
• Improve detection capabilities through tuning, rule development, and operational process improvements.
• Own technical vulnerability management processes including prioritization, risk assessment, remediation guidance, validation, and exception review.
• Partner with infrastructure, application, and business teams to reduce organizational risk.
• Review vulnerability trends and provide remediation recommendations.
• Assist with penetration testing, security assessments, and remediation planning.
• Deploy, maintain, and improve cybersecurity technologies including:
• Identity and Access Management
• Email Security
• Network Security Controls
• Security Monitoring Platforms
• Develop and maintain security standards, baselines, and technical controls.
• Participate in Zero Trust and security architecture initiatives.
• Support security audits, assessments, compliance initiatives, and evidence validation.
• Assist with policy development and control implementation.
• Contribute to risk assessments, vendor security reviews, and security governance activities.
• Review escalated investigations and provide technical direction.
• Maintain incident response procedures, runbooks, and investigation standards.
• Provide security metrics, reporting, and recommendations to leadership.

Qualifications

Required

• 5+ years of cybersecurity, systems administration, security operations, or infrastructure security experience.
• Experience investigating security incidents and conducting root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.
• Strong communication, analytical, and documentation skills.

Preferred

• CrowdStrike
• Microsoft Defender Security Stack
• Zscaler
• SIEM platforms
• Manufacturing or industrial environments
• Security+, CySA+, CISSP, GSEC, SC-200, SC-300, AZ-500, or equivalent certifications

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.