Security Operations Analyst - Cloud & Incident Response

Remote Queer; United States; Hybrid; USD 100,000 - 150,000; Full time

Job summary

BCC Software is seeking a Security Analyst to support its cybersecurity program by defining, validating, and reporting on security controls protecting company assets and sensitive information across North America. You will manage risk, lead incident response, and collaborate with IT to ensure governance and continuous improvement.

Responsibilities include strengthening identity security, deploying Microsoft security tools, overseeing MDR, managing vulnerability remediation SLAs, and producing

Qualifications

• Minimum 5+ years in cybersecurity operations or equivalent.
• Strong knowledge of cloud security and identity protection.
• Experience coordinating with audits (SOC 2 Type II) and compliance.
• Proven ability to lead incident response and document playbooks.

Responsibilities

• Define, validate, and report on security controls.
• Oversee vulnerability management and remediation SLAs.
• Lead incident response and act as security liaison during incidents.
• Develop security dashboards and reports for management.
• Manage third‑party security risk and vendor questionnaires.

Skills

Cybersecurity operations

Security governance

Incident response

Security metrics reporting

Communication and collaboration

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Microsoft 365 security

Microsoft Azure security

Entra ID

Defender XDR

Microsoft Sentinel

PowerShell

KQL

Azure Policy

Job description

BCC Software is seeking a Security Analyst to support its cybersecurity program by defining, validating, and reporting on security controls protecting company assets and sensitive information across North America. You will manage risk, lead incident response, and collaborate with IT to ensure governance and continuous improvement.

Responsibilities include strengthening identity security, deploying Microsoft security tools, overseeing MDR, managing vulnerability remediation SLAs, and producing