Назад
Company hidden
10 дней назад

Security Analyst (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Analyst (Cybersecurity): Supporting day-to-day information security operations by managing vulnerabilities, executing patch cycles, triaging security alerts, and administering Microsoft security tools with an accent on incident handling, access reviews, and security control effectiveness. Focus on investigating vulnerabilities and routine incidents, improving detection configurations, maintaining compliance evidence, and supporting security awareness across a manufacturing organization.

Location: Brillion, Wisconsin, United States; onsite

Company

hirify.global manufactures outdoor power equipment and operates headquarters, manufacturing facilities, and global distribution businesses.

What you will do

  • Triage and classify vulnerabilities from vulnerability management, attack surface, and threat intelligence feeds; coordinate remediation and verify closure.
  • Run vendor assessment tools, analyze vulnerabilities, misconfigurations, and control gaps, and route findings for remediation.
  • Execute monthly server and workstation patching, resolve patch failures, and report patch compliance.
  • Perform first-line triage of escalated security alerts, investigate routine incidents, and escalate confirmed or high-severity incidents.
  • Administer endpoint protection, email security, identity protection, logging, and monitoring tools; tune detections and apply configuration changes.
  • Run security awareness activities, conduct access reviews, maintain risk and exception records, produce audit evidence, document incidents and runbooks, and provide rotating on-call support.

Requirements

  • Minimum 3 years of hands-on information technology experience, including at least 2 years in a security operations capacity.
  • Experience with vulnerability management, patch management, or security alert triage and incident handling.
  • System and application administration experience in a Microsoft environment, including Active Directory, Entra ID, Microsoft 365, Microsoft Defender, and Intune.
  • Working knowledge of a scripting language for automation and reporting; PowerShell or Python preferred.
  • Working knowledge of a recognized security control framework such as the NIST Cybersecurity Framework or CIS Critical Security Controls.
  • Organization, documentation, and written communication skills, including the ability to explain security requirements to non-technical staff.
  • Ability to work independently on recurring responsibilities and recognize when to escalate.
  • Applicants must be authorized to work in the United States without requiring sponsorship now or in the future.

Nice to have

  • Degree in Information Security, Cybersecurity, Information Assurance, Computer Science, Information Systems, Computer or Network Engineering, Information Technology, or a closely related technical field.
  • Experience in a manufacturing environment, including exposure to operational technology and non-IT-managed assets.

Culture & Benefits

  • Collaborative environment emphasizing innovative thinking, hard work, determination, and quick decision-making.
  • Continuous training, advancement opportunities, tuition reimbursement, and apprenticeship programs.
  • Medical, dental, and vision insurance effective on the first day, plus life insurance, short-term disability, parental leave, and an employee assistance program.
  • 401(k) matching, profit-sharing, flexible spending and health savings accounts, and paid holidays.
  • Onsite care options, health clinic access, product purchase benefits, and childcare or tuition discounts.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →