Cybersecurity Analyst

JRM Construction Management, LLC•New York, NY

7d•$90,000 - $110,000

About The Position

JRM Construction is seeking a Cybersecurity Analyst with a strong foundation in Windows-based IT administration, hands-on experience designing, implementing, and operating information security tools, and a governance-focused mindset. The role supports security operations and evaluates, tests, and deploys emerging technologies and procedures. The Analyst manages multiple priorities, maintains detailed documentation and structured workflows, and shares responsibility for incident response. Reporting directly to the Manager of Information Security, the Analyst will contribute to a security program focused on agility, operational excellence, and continuous improvement.

Requirements

At least 3 years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.
Familiarity with Microsoft 365, Entra ID (Azure AD), third-party identity provider platforms, Intune, and modern endpoint security tools.
PowerShell scripting and automation skills.
Understanding of cybersecurity frameworks and governance models, including NIST CSF, ISO 27001, and CIS.
Analytical, collaborative, and adaptable mindset.
Strong documentation skills.

Nice To Haves

Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms.
Experience evaluating emerging and cloud security solutions.
Exposure to SIEM detection engineering and SOAR or automation platforms.
Experience in risk assessments, audit preparation, or compliance reporting.
Familiarity with Python, SQL, or Bash/Shell for automation and security analysis.

Responsibilities

Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures.
Support alignment with NIST CSF, ISO 27001, and CIS Controls.
Maintain the security risk register, perform technical risk assessments, and drive remediation to closure.
Engineer, automate, and maintain secure Windows system baselines using Windows Server, Active Directory, DNS, Group Policy, and PowerShell.
Work with IT and infrastructure teams to ensure secure configurations and compliance enforcement.
Deploy, configure, and tune endpoint management and compliance controls using UEM, MDM, and EDR tools.
Implement identity governance practices, privileged access controls, phishing-resistant MFA, and conditional access policies across Microsoft Entra ID and other identity providers.
Automate and improve secure onboarding and offboarding lifecycle management processes.
Operate a phishing simulation and security awareness platform, run simulations, and report on campaign effectiveness.
Triage user-reported phishing attempts and maintain IT communication templates and user education content.
Design, deploy, and maintain EDR, SIEM, email security, and vulnerability management platforms.
Maintain configuration baselines and documentation for security tools.
Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort.
Run vulnerability scans, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams.
Monitor SIEM alerts and dashboards and tune detections to reduce noise.
Respond technically to security incidents by triaging, investigating, containing, and documenting root causes and lessons learned.
Support incident response playbooks and tabletop exercises.
Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms.
Research, test, and participate in proof-of-concept efforts for cybersecurity tools, technologies, and frameworks.
Deploy technologies and procedures that improve detection, prevention, and governance.
Provide technical input and analysis for tool evaluations, pilots, and strategic initiatives.