Security Analyst

🕒 Outubro 21

🗽 New York – Remoto

🗽 New York – Remote

💵 $100.000 - $120.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 22 dias.
• As vagas desta empresa costumam ser preenchidas em 24 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

BCC Software

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 1978

💼 Consultoria

📦 Logística

📣 Marketing

Consulting • Logistics • Marketing

A BCC Software é uma fornecedora líder de soluções completas de software de envio, projetadas para otimizar campanhas de mala direta e aprimorar a qualidade dos dados. Com uma gama de produtos que inclui software de pré-classificação, ferramentas de processamento de dados e serviços de gerenciamento automatizado de endereços, a BCC Software ajuda as organizações a melhorar a eficiência, reduzir custos e garantir conformidade postal. Suas soluções atendem prestadores de serviços de envio e proprietários de correspondências, permitindo que processem grandes volumes de correio com precisão e facilidade, além de facilitar esforços de marketing multicanal.

Descrição

• Define, validate, and report on security controls to protect company assets and sensitive information and reduce cyber risk • Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management (PIM) • Integrate, deploy, support, and continuously improve security tools and the Microsoft security stack, including Defender XDR, Microsoft Sentinel and KQL, and Microsoft Intune security capabilities • Oversee the managed detection and response (MDR) provider, including escalations, tuning, and service reviews • Own the vulnerability and exposure management program, establish remediation SLAs, verify remediation evidence, and report status, exceptions, and risk trends • Lead incident response and serve as the primary security contact during incidents; maintain playbooks, escalation procedures, tabletop exercises, and on-call expectations • Establish Azure cloud security guardrails for landing zones and oversee Defender for Cloud, Azure Policy, and related cloud security controls • Own data protection controls through Microsoft Purview sensitivity labeling and data loss prevention for customer data and personally identifiable information • Enforce the AI Usage Policy and govern risks associated with Microsoft Copilot oversharing, shadow AI, and SaaS discovery • Manage third-party and vendor security risk, including due diligence, recurring reviews, evidence collection, and customer security questionnaires • Manage security ticket workflows for access reviews and phishing reports; define response SLAs and verify supporting evidence • Create and maintain security documentation, including policies, the risk register, incident response records, and audit evidence • Align the security program with NIST Cybersecurity Framework (CSF) 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations • Validate ransomware resilience through evidence of immutable backups and recurring recovery testing • Manage the security awareness training program and work across teams to reinforce security policies, controls, monitoring, and best practices • Provide backup support for network, server, and cloud administration as needed, without assuming primary responsibility for routine administration • Assist with security-related budgets and purchases • Serve as liaison with security and IT professionals at BlueCrest and Platinum • Develop and manage security reports and dashboards for management • Serve as the escalation contact for critical security incidents, including those raised by the MDR provider • Participate in on-call rotation and perform periodic evening and weekend work for maintenance, testing, and incident response

🎯 Requisitos

• 5+ years of cybersecurity operations experience or equivalent experience • Strong understanding of secure network architecture and networking principles • Knowledge of Windows, macOS, and Linux operating systems • Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy • Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls • Experience supporting SOC 2 Type II audits, including control validation and evidence collection • Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls • PowerShell scripting and KQL query skills for security operations, investigation, and automation • Ability to respond quickly to critical problems and willingness to participate in an on-call rotation • Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders • Understanding of adversary tactics and tooling (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls • One or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP • Must be able to work within the United States

🏖️ Benefícios

• Employees can work remotely • Occasional travel to data center facilities, customer locations, or BCC Software headquarters • Time zone flexibility for employees located elsewhere in the U.S. • On-call rotation with defined after-hours response expectations • Periodic evening and weekend work for planned maintenance windows, security testing, and incident response • Equal employment opportunity and reasonable accommodations for qualified individuals with disabilities

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo