Security Analyst

🕒 Outubro 23

🗽 New York – Remoto

🗽 New York – Remote

💵 $100.000 - $120.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 20 dias.
• As vagas desta empresa costumam ser preenchidas em 24 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

BCC Software

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 1978

💼 Consultoria

📦 Logística

📣 Marketing

Consulting • Logistics • Marketing

A BCC Software é uma fornecedora líder de soluções completas de software de envio, projetadas para otimizar campanhas de mala direta e aprimorar a qualidade dos dados. Com uma gama de produtos que inclui software de pré-classificação, ferramentas de processamento de dados e serviços de gerenciamento automatizado de endereços, a BCC Software ajuda as organizações a melhorar a eficiência, reduzir custos e garantir conformidade postal. Suas soluções atendem prestadores de serviços de envio e proprietários de correspondências, permitindo que processem grandes volumes de correio com precisão e facilidade, além de facilitar esforços de marketing multicanal.

Descrição

• Define, validate, and report on security controls to protect company assets and sensitive information and reduce cyber risk • Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and PIM • Integrate, deploy, support, and improve Microsoft security tools, including Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security capabilities • Oversee the managed detection and response provider, including escalations, tuning, and service reviews • Own vulnerability and exposure management, establish remediation SLAs, verify evidence, and report risk trends • Lead incident response and serve as the primary security contact during incidents • Maintain incident playbooks, escalation procedures, tabletop exercises, and on-call expectations • Establish Azure cloud security guardrails and oversee Defender for Cloud, Azure Policy, and related controls • Own Microsoft Purview sensitivity labeling and data loss prevention controls • Enforce the AI Usage Policy and govern Microsoft Copilot oversharing, shadow AI, and SaaS discovery risks • Manage third-party and vendor security risk, due diligence, recurring reviews, evidence collection, and customer security questionnaires • Manage security ticket workflows for access reviews and phishing reports • Create and maintain security policies, the risk register, incident response records, and audit evidence • Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations • Validate ransomware resilience through immutable backup evidence and recurring recovery testing • Manage security awareness training and reinforce security policies, controls, monitoring, and best practices across teams • Provide backup support for network, server, and cloud administration as needed • Assist with security-related budgets and purchases • Liaise with security and IT professionals at BlueCrest and Platinum • Develop and manage security reports and dashboards for management

🎯 Requisitos

• 5+ years of cybersecurity operations experience or equivalent experience • Strong understanding of secure network architecture and networking principles • Knowledge of Windows, macOS, and Linux operating systems • Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy • Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls • Experience supporting SOC 2 Type II audits, including control validation and evidence collection • Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls • PowerShell scripting and KQL query skills for security operations, investigation, and automation • Ability to respond quickly to critical problems and willingness to participate in an on-call rotation • Strong written and verbal communication skills, including defining security SLAs, evaluating evidence, reporting risk, and communicating requirements to technical and business stakeholders • Understanding of adversary tactics and tooling (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls • One or more relevant security certifications preferred, including SC-200, AZ-500, SC-300, or CISSP • Ability to work Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility elsewhere in the U.S. • Willingness to perform periodic evening and weekend work for maintenance windows, security testing, and incident response

🏖️ Benefícios

• Remote work permitted from anywhere within the United States • Time zone flexibility for employees located elsewhere in the U.S. • Full-time exempt position • Participation in on-call rotation with defined after-hours response expectations • Equal employment opportunity and reasonable accommodations

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo