Cybersecurity Analyst

About This Role

Combining a strong foundation in Windows-based IT administration with hands-on experience in modern information security tools and a governance-focused mindset is central to this Cybersecurity Analyst role. This position is critical to the success of security operations, playing a key part in evaluating, testing, and deploying emerging technologies and new procedures to keep the company proactive in the evolving cybersecurity landscape. The ideal candidate is technically proficient, highly organized, and able to manage multiple priorities, maintain detailed documentation, and uphold structured workflows. The Analyst also shares responsibility for incident response, reporting directly to the Manager of Information Security.

Responsibilities

• Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures
• Support alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls
• Maintain the security risk register and perform technical risk assessments and drive remediation to closure
• Leverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines
• Work with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment
• Deploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools
• Implement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs
• Automate and improve lifecycle management processes, including secure onboarding and offboarding
• Operate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness
• Triage user-reported phishing attempts and maintain IT communication templates and user education content
• Design, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management
• Maintain configuration baselines and documentation for deployed security tools
• Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort
• Run vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams
• Monitor SIEM alerts and dashboards, and tune detections to reduce noise
• Act as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned
• Support incident response playbooks and tabletop exercises
• Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms
• Participate in research, testing, and proof-of-concept (PoC) efforts for new cybersecurity tools, technologies, and frameworks
• Deploy new technologies and procedures that improve detection, prevention, and governance
• Provide technical input and analysis for tool evaluations, pilots, and strategic initiatives

Requirements

• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments
• Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools
• Scripting and automation skills in PowerShell
• Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS)
• Analytical, collaborative, and adaptable mindset with strong documentation skills

Nice to have:

• Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions
• Exposure to SIEM detection engineering and SOAR or automation platforms
• Experience in risk assessments, audit preparation, or compliance reporting
• Familiarity with Python, SQL, or Bash/Shell for automation and security analysis

About the Company

JRM Construction is an employee-owned construction firm that builds exceptional spaces and focuses on developing talented teams and trusted relationships. Guided by integrity, teamwork, continuous improvement, and genuine care for its people, JRM provides an environment where employees can grow and help shape the company's long-term success.