Security Analyst

🔥 13 minutes ago

🗽 New York – Remote

🗽 New York – Remote

💵 $100k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BCC Software

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 1978

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

BCC Software is a leading provider of comprehensive mailing software solutions designed to optimize direct mail campaigns and enhance data quality. With a range of products including presort software, data processing tools, and automated address management services, BCC Software helps organizations improve efficiency, reduce costs, and ensure postal compliance. Their solutions cater to mail service providers and mail owners, allowing them to process large volumes of mail with precision and ease while also facilitating omnichannel marketing efforts.

📋 Description

• Define, validate, and report on security controls to protect company assets and sensitive information and reduce cyber risk • Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and PIM • Integrate, deploy, support, and improve Microsoft security tools, including Defender XDR, Microsoft Sentinel, KQL, and Microsoft Intune security capabilities • Oversee the managed detection and response provider, including escalations, tuning, and service reviews • Own vulnerability and exposure management, establish remediation SLAs, verify evidence, and report risk trends • Lead incident response and serve as the primary security contact during incidents • Maintain incident playbooks, escalation procedures, tabletop exercises, and on-call expectations • Establish Azure cloud security guardrails and oversee Defender for Cloud, Azure Policy, and related controls • Own Microsoft Purview sensitivity labeling and data loss prevention controls • Enforce the AI Usage Policy and govern Microsoft Copilot oversharing, shadow AI, and SaaS discovery risks • Manage third-party and vendor security risk, due diligence, recurring reviews, evidence collection, and customer security questionnaires • Manage security ticket workflows for access reviews and phishing reports • Create and maintain security policies, the risk register, incident response records, and audit evidence • Align the security program with NIST CSF 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations • Validate ransomware resilience through immutable backup evidence and recurring recovery testing • Manage security awareness training and reinforce security policies, controls, monitoring, and best practices across teams • Provide backup support for network, server, and cloud administration as needed • Assist with security-related budgets and purchases • Liaise with security and IT professionals at BlueCrest and Platinum • Develop and manage security reports and dashboards for management

🎯 Requirements

• 5+ years of cybersecurity operations experience or equivalent experience • Strong understanding of secure network architecture and networking principles • Knowledge of Windows, macOS, and Linux operating systems • Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy • Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls • Experience supporting SOC 2 Type II audits, including control validation and evidence collection • Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls • PowerShell scripting and KQL query skills for security operations, investigation, and automation • Ability to respond quickly to critical problems and willingness to participate in an on-call rotation • Strong written and verbal communication skills, including defining security SLAs, evaluating evidence, reporting risk, and communicating requirements to technical and business stakeholders • Understanding of adversary tactics and tooling (MITRE ATT&CK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls • One or more relevant security certifications preferred, including SC-200, AZ-500, SC-300, or CISSP • Ability to work Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility elsewhere in the U.S. • Willingness to perform periodic evening and weekend work for maintenance windows, security testing, and incident response

🏖️ Benefits

• Remote work permitted from anywhere within the United States • Time zone flexibility for employees located elsewhere in the U.S. • Full-time exempt position • Participation in on-call rotation with defined after-hours response expectations • Equal employment opportunity and reasonable accommodations