Security Analyst

🕒 Outubro 21

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $100.000 - $120.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 22 dias.
• As vagas desta empresa costumam ser preenchidas em 24 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

BCC Software

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 1978

💼 Consultoria

📦 Logística

📣 Marketing

Consulting • Logistics • Marketing

A BCC Software é uma fornecedora líder de soluções completas de software de envio, projetadas para otimizar campanhas de mala direta e aprimorar a qualidade dos dados. Com uma gama de produtos que inclui software de pré-classificação, ferramentas de processamento de dados e serviços de gerenciamento automatizado de endereços, a BCC Software ajuda as organizações a melhorar a eficiência, reduzir custos e garantir conformidade postal. Suas soluções atendem prestadores de serviços de envio e proprietários de correspondências, permitindo que processem grandes volumes de correio com precisão e facilidade, além de facilitar esforços de marketing multicanal.

Descrição

• Support BCC Software’s cybersecurity program by defining, validating, and reporting on security controls • Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management • Integrate, deploy, support, and continuously improve Microsoft security tools, including Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security capabilities • Oversee the managed detection and response provider, including escalations, tuning, and service reviews • Own vulnerability and exposure management, remediation SLAs, remediation evidence, and risk reporting • Lead incident response and serve as the primary security contact during incidents • Maintain incident response playbooks, escalation procedures, tabletop exercises, and on-call expectations • Establish Azure cloud security guardrails and oversee Defender for Cloud, Azure Policy, and related controls • Own data protection controls through Microsoft Purview sensitivity labeling and data loss prevention • Enforce the AI Usage Policy and govern risks involving Microsoft Copilot oversharing, shadow AI, and SaaS discovery • Manage third-party and vendor security risk, including due diligence, recurring reviews, evidence collection, and customer security questionnaires • Manage security ticket workflows for access reviews and phishing reports • Create and maintain security policies, the risk register, incident response records, and audit evidence • Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations • Validate ransomware resilience through immutable backup evidence and recurring recovery testing • Manage security awareness training and reinforce security policies, controls, monitoring, and best practices across teams • Provide backup support for network, server, and cloud administration as needed • Assist with security-related budgets and purchases • Liaise with security and IT professionals at BlueCrest and Platinum • Develop and manage security reports and dashboards for management

🎯 Requisitos

• 5+ years of cybersecurity operations experience or equivalent experience • Strong understanding of secure network architecture and networking principles • Knowledge of Windows, macOS, and Linux operating systems • Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy • Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls • Experience supporting SOC 2 Type II audits, including control validation and evidence collection • Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls • PowerShell scripting and KQL query skills for security operations, investigation, and automation • Ability to respond quickly to critical problems and willingness to participate in an on-call rotation • Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders • Understanding of adversary tactics and tooling (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls • One or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP • Ability to work within the United States • Full-time, exempt availability; standard hours Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility elsewhere in the U.S. • Willingness to participate in periodic evening and weekend work

🏖️ Benefícios

• Occasional travel to data center facilities, customer locations, or BCC Software headquarters • Time zone flexibility for employees located elsewhere in the U.S. • On-call rotation with defined after-hours response expectations • Periodic evening and weekend work for planned maintenance, security testing, and incident response

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo