Cybersecurity Analyst

JRM Construction Management is seeking a Cybersecurity Analyst to operate and improve its security program, combining Windows-based IT administration with security engineering, governance, and incident response. The role evaluates and deploys security technologies, manages risk and controls, and works with IT and infrastructure teams to strengthen security operations.

Responsibilities

• Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures
• Support alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls
• Maintain the security risk register and perform technical risk assessments and drive remediation to closure
• Leverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines
• Work with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment
• Deploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools
• Implement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs
• Automate and improve lifecycle management processes, including secure onboarding and offboarding
• Operate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness
• Triage user-reported phishing attempts and maintain IT communication templates and user education content
• Design, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management
• Maintain configuration baselines and documentation for deployed security tools
• Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort
• Run vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams
• Monitor SIEM alerts and dashboards, and tune detections to reduce noise
• Act as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned
• Support incident response playbooks and tabletop exercises
• Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms
• Participate in research, testing, and proof-of-concept (PoC) efforts for new cybersecurity tools, technologies, and frameworks
• Deploy new technologies and procedures that improve detection, prevention, and governance
• Provide technical input and analysis for tool evaluations, pilots, and strategic initiatives

Preferred

• Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions
• Exposure to SIEM detection engineering and SOAR or automation platforms
• Experience in risk assessments, audit preparation, or compliance reporting
• Familiarity with Python, SQL, or Bash/Shell for automation and security analysis
• Security tool deployment
• Security tool configuration
• Security tool tuning
• Endpoint detection
• response (EDR)
• Email security
• Vulnerability management
• Emerging security solutions
• Cloud security
• SIEM detection engineering
• SOAR platforms
• Security automation
• Risk assessment
• Audit preparation
• Compliance reporting
• Python
• SQL
• Bash/Shell
• Security analysis

Company

• General contracting and construction management services
• New York, New York, USA
• http://jrmcm.com/
• Founded in 2007
• 501-1000 employees

Qualifications

• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments
• Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools
• Scripting and automation skills in PowerShell
• Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS)
• Analytical, collaborative, and adaptable mindset with strong documentation skills
• Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions
• Exposure to SIEM detection engineering and SOAR or automation platforms
• Experience in risk assessments, audit preparation, or compliance reporting
• Familiarity with Python, SQL, or Bash/Shell for automation and security analysis
• 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.

Required skills

• Bash/Shell, CIS Controls, ISO 27001, Microsoft 365, Microsoft Entra ID, Microsoft Intune, NIST Cybersecurity Framework (CSF), PowerShell, Python, Risk Assessments, SIEM Detection Engineering, SQL, Windows Administration

Preferred skills

• (1), (2), *2026, 100, 2022, 2023, 2024, 2026-08-19, 2026-08-26, 2026-08-28, AI Tools, Chairperson of the Board, Chief Executive Officer, Company data provided by, Data Powered by, David G. McWilliams, Distribution of Different Job Fields Receiving Sponsorship, EIN Presswire, Engineering and Development, General contracting and construction management services., H1B Sponsorship, Joseph P. Romano, Late Stage, Leadership Team, New York, New York, USA, Newswire, Recent News, Represents job field similar to this job, Trends of Total Sponsorships, http://jrmcm.com

Experience

• 3+ years