Security Analyst
BCC Software
Posted: 10/21/2026AzureCloudCyber SecurityFirewallsLinuxMacOS
Cyber Security Analyst
Sprezzatura
Posted: 10/21/2026Cyber SecurityServiceNow
Security Analyst
BCC Software
Posted: 10/21/2026AzureCloudCyber SecurityFirewallsLinuxMacOS
Security Analyst
The Health Management Academy
Posted: 10/20/2026AzureCloudPython
Lead Security Analyst – Digital Forensics and Incident Response
Gartner
Posted: 10/20/2026AWSAzureCloudCyber SecurityKubernetesLinuxMacOSPythonSplunk
Senior Security Analyst
Sola
Posted: 10/20/2026AWSFirewallsJavaScriptLinuxNode.jsPython
Senior Security Analyst
Ensono
Posted: 10/20/2026AzureCloudCyber SecurityDNSFirewallsPythonSQLTCP/IP
Cloud Security Analyst
InvestCloud, Inc.
Posted: 10/20/2026AWSAzureCloudFirewallsKubernetesTerraform
IT Security Analyst
DecisionPoint Corporation
Posted: 10/20/2026Cyber Security
Senior Cybersecurity Analyst
Law School Admission Council (LSAC)
Posted: 10/20/2026AzureCloudCyber SecurityFirewallsTCP/IPVault
Lead Analyst – Cyber Security Operations
Hyatt
Posted: 10/20/2026CloudCyber SecurityFirewallsPythonSQLTCP/IP
Analyst, Security Technology
S&P Global
Posted: 10/20/2026
Industrial Security Analyst – Top Secret
Xcelerate Solutions
Posted: 10/20/2026
Security Analyst
AVANT Communications
Posted: 10/20/2026
Security & Network Analyst II
The Jackson Laboratory
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSFirewallsITSMPythonSQL+2 more
IT Security Analyst
Epicor
Posted: 10/19/2026AWSAzureCloudCyber SecurityDNSLinuxPythonSplunkTCP/IP
Intermediate Cybersecurity Analyst – Splunk
General Dynamics Information Technology
Posted: 10/16/2026CloudCyber SecurityFirewallsMS SQL ServerOracleSplunkSQL
Cybersecurity Analyst II
Frontgrade Technologies
Posted: 10/16/2026Cyber SecurityIoTLinuxPython
Cybersecurity Analyst – AI Focus
GuideWell Source
Posted: 10/16/2026AWSAzureCloudCyber SecurityFirewallsTCP/IP
Principal Security Compliance Analyst – FedRAMP
Entrust
Posted: 10/16/2026Cloud
Security Analyst
BCC SoftwarePosted 10/21/2026full-timeRemote • United StatesMid-LevelSenior💰 $100,000 - $120,000 per yearWebsite
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity operations, including incident response, vulnerability management, and security policy development. Proficient in Microsoft security tools and frameworks, with a strong focus on risk assessment and compliance.
Highest-signal resume keywords
Cybersecurity Operations ExperienceMicrosoft Security Tools ProficiencyIncident Response LeadershipVulnerability Management ExpertiseNIST Cybersecurity Framework Familiarity
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Support BCC Software’s cybersecurity program by defining, validating, and reporting on security controls
- Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management
- Integrate, deploy, support, and continuously improve Microsoft security tools, including Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security capabilities
- Oversee the managed detection and response provider, including escalations, tuning, and service reviews
- Own vulnerability and exposure management, remediation SLAs, remediation evidence, and risk reporting
- Lead incident response and serve as the primary security contact during incidents
- Maintain incident response playbooks, escalation procedures, tabletop exercises, and on-call expectations
- Establish Azure cloud security guardrails and oversee Defender for Cloud, Azure Policy, and related controls
- Own data protection controls through Microsoft Purview sensitivity labeling and data loss prevention
- Enforce the AI Usage Policy and govern risks involving Microsoft Copilot oversharing, shadow AI, and SaaS discovery
- Manage third-party and vendor security risk, including due diligence, recurring reviews, evidence collection, and customer security questionnaires
- Manage security ticket workflows for access reviews and phishing reports
- Create and maintain security policies, the risk register, incident response records, and audit evidence
- Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations
- Validate ransomware resilience through immutable backup evidence and recurring recovery testing
- Manage security awareness training and reinforce security policies, controls, monitoring, and best practices across teams
- Provide backup support for network, server, and cloud administration as needed
- Assist with security-related budgets and purchases
- Liaise with security and IT professionals at BlueCrest and Platinum
- Develop and manage security reports and dashboards for management
Requirements
What you’ll need- 5+ years of cybersecurity operations experience or equivalent experience
- Strong understanding of secure network architecture and networking principles
- Knowledge of Windows, macOS, and Linux operating systems
- Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy
- Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls
- Experience supporting SOC 2 Type II audits, including control validation and evidence collection
- Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls
- PowerShell scripting and KQL query skills for security operations, investigation, and automation
- Ability to respond quickly to critical problems and willingness to participate in an on-call rotation
- Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders
- Understanding of adversary tactics and tooling (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls
- One or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP
- Ability to work within the United States
- Full-time, exempt availability; standard hours Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility elsewhere in the U.S.
- Willingness to participate in periodic evening and weekend work
Benefits
Comp & perks- Occasional travel to data center facilities, customer locations, or BCC Software headquarters
- Time zone flexibility for employees located elsewhere in the U.S.
- On-call rotation with defined after-hours response expectations
- Periodic evening and weekend work for planned maintenance, security testing, and incident response
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PowerShell ScriptingKQL Query SkillsSecure Network ArchitectureRisk AssessmentSecurity Configuration ReviewIncident Response Playbook MaintenanceData Protection ControlsSecurity Policy DevelopmentPhishing-Resistant MFAVulnerability and Exposure Management
Soft Skills
Strong Written CommunicationStrong Verbal CommunicationProblem-Solving AbilityTeam CollaborationAdaptability
Tools & Technologies
Microsoft Entra IDMicrosoft Defender XDRMicrosoft SentinelMicrosoft IntuneAzure PolicyDefender for CloudFortinet FirewallsCisco SwitchesJuniper SwitchesMicrosoft Purview
Certifications & Qualifications
Microsoft Certified: Security Operations Analyst Associate (SC-200)Azure Security Engineer Associate (AZ-500)Identity and Access Administrator Associate (SC-300)CISSP
Industry Keywords
NIST Cybersecurity Framework (CSF) 2.0CIS ControlsSOC 2 Type IICyber Insurance AttestationsManaged Detection and ResponseRisk ReportingSecurity Awareness TrainingIncident ResponseData Loss PreventionAdversary Tactics and Tooling