Security Analyst

The Security Analyst supports BCC Software ’s cybersecurity program by defining, validating, and reporting on security controls to protect company assets and sensitive information and reduce cyber risk. This role uses recognized frameworks, third-party audits, and defined service-level agreements to guide security governance, operations, and continuous improvement. IT owns day-to-day system administration. Essential Functions Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management (PIM). Integrate, deploy, support, and continuously improve security tools and the Microsoft security stack, including Defender XDR, Microsoft Sentinel and KQL, and Microsoft Intune security capabilities. Oversee the managed detection and response (MDR) provider, including escalations, tuning, and service reviews. Own the vulnerability and exposure management program, establish remediation SLAs, verify remediation evidence, and report status, exceptions, and risk trends. Lead incident response and serve as the primary security contact during incidents; maintain playbooks, escalation procedures, tabletop exercises, and on-call expectations. Establish Azure cloud security guardrails for landing zones and oversee Defender for Cloud, Azure Policy, and related cloud security controls. Own data protection controls through Microsoft Purview sensitivity labeling and data loss prevention for customer data and personally identifiabl