Cybersecurity Analyst

The role

The Cybersecurity Analyst will design, implement, and operate information security tools and manage security operations. This role involves Windows-based IT administration, governance, risk management, and incident response.

What you will do

• Develop, document, and enforce cybersecurity policies, standards, and control procedures.
• Support alignment with NIST CSF, ISO 27001, and CIS Controls.
• Maintain the security risk register and perform technical risk assessments.
• Engineer, automate, and maintain secure system baselines using Windows Server, Active Directory, DNS, Group Policy, and PowerShell.
• Deploy, configure, and tune endpoint management and compliance controls.
• Implement identity governance, privileged access controls, and conditional access policy design.
• Operate a phishing simulation and security awareness platform.
• Design, deploy, and maintain core security platforms including EDR, SIEM, email security, and vulnerability management.
• Monitor SIEM alerts and act as a technical responder in security incidents.
• Automate security tasks and response workflows using PowerShell, Python, and SOAR.

Required qualifications

• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.
• Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools.
• Scripting and automation skills in PowerShell.
• Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS).
• Analytical, collaborative, and adaptable mindset with strong documentation skills.

Nice to have

• Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions.
• Exposure to SIEM detection engineering and SOAR or automation platforms.
• Experience in risk assessments, audit preparation, or compliance reporting.
• Familiarity with Python, SQL, or Bash/Shell for automation and security analysis.

About the company

JRM Construction is an employee-owned construction firm. The company focuses on building talented teams and delivering outstanding quality through teamwork and integrity.