Senior Security Analyst – Cloud, IAM & IR

Automatic Data Processing, Inc.; City of Rochester (NY); Remote; USD 100,000 - 120,000; Full time

Job summary

BCC Software is seeking a Security Analyst to define, validate, and report on security controls across our systems, protecting assets and sensitive information. You will work with a mature cybersecurity program, leveraging frameworks, audits, and SLAs to guide governance, operations, and continuous improvement.

IT owns day-to-day system administration. You will lead identity security enhancements, manage MS security stack, oversee MDR services, and own the vulnerability program while

Qualifications

• 5+ years of cybersecurity operations experience or equivalent experience.
• Experience with Microsoft 365 and Azure security controls.
• Familiarity with CSF 2.0 and CIS Controls.

Responsibilities

• Strengthen identity security using Entra ID, Conditional Access, MFA, and PIM.
• Deploy and improve Defender XDR, Sentinel, and Intune security capabilities.
• Oversee MDR provider, including escalations and reviews.
• Own vulnerability and exposure management with SLAs and risk reporting.
• Lead incident response and act as primary security contact during incidents.
• Establish cloud guardrails in Azure and oversee Defender for Cloud and Policy.
• Manage data protection controls with Purview labeling and DLP.
• Develop and maintain security documentation and dashboards.

Skills

Cybersecurity operations

PowerShell

KQL

Security governance

Incident response

Tools

Microsoft Entra ID

Defender XDR

Microsoft Sentinel

Microsoft Intune

Azure Policy

Job description

BCC Software is seeking a Security Analyst to define, validate, and report on security controls across our systems, protecting assets and sensitive information. You will work with a mature cybersecurity program, leveraging frameworks, audits, and SLAs to guide governance, operations, and continuous improvement.

IT owns day-to-day system administration. You will lead identity security enhancements, manage MS security stack, oversee MDR services, and own the vulnerability program while