Security-Analyst, Cybersecurity-Analyst, Information-Security-Analyst Jobs

The Security Analyst supports BCC Software’s cybersecurity program by defining, validating, and reporting on security controls to protect company assets and sensitive information and reduce cyber risk. This role uses recognized frameworks, third-party audits, and defined service-level agreements to guide security governance, operations, and continuous improvement. IT owns day-to-day system administration.

Essential Functions

• Strengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management (PIM).
• Integrate, deploy, support, and continuously improve security tools and the Microsoft security stack, including Defender XDR, Microsoft Sentinel and KQL, and Microsoft Intune security capabilities.
• Oversee the managed detection and response (MDR) provider, including escalations, tuning, and service reviews.
• Own the vulnerability and exposure management program, establish remediation SLAs, verify remediation evidence, and report status, exceptions, and risk trends.
• Lead incident response and serve as the primary security contact during incidents; maintain playbooks, escalation procedures, tabletop exercises, and on-call expectations.
• Establish Azure cloud security guardrails for landing zones and oversee Defender for Cloud, Azure Policy, and related cloud security controls.
• Own data protection controls through Microsoft Purview sensitivity labeling and data loss prevention for customer data and personally identifiable information.
• Enforce the AI Usage Policy and govern risks associated with Microsoft Copilot oversharing, shadow AI, and SaaS discovery.
• Manage third-party and vendor security risk, including due diligence, recurring reviews, evidence collection, and customer security questionnaires.
• Manage security ticket workflows for access reviews and phishing reports; define response SLAs and verify supporting evidence.
• Create and maintain security documentation, including policies, the risk register, incident response records, and audit evidence.
• Align the security program with NIST Cybersecurity Framework (CSF) 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations.
• Validate ransomware resilience through evidence of immutable backups and recurring recovery testing.
• Manage the security awareness training program and work across teams to reinforce security policies, controls, monitoring, and best practices.
• Provide backup support for network, server, and cloud administration as needed, without assuming primary responsibility for routine administration.
• Assist with security-related budgets and purchases.
• Serve as liaison with security and IT professionals at BlueCrest and Platinum.
• Develop and manage security reports and dashboards for management.

• 5+ years of cybersecurity operations experience or equivalent experience.
• Strong understanding of secure network architecture and networking principles.
• Knowledge of Windows, macOS, and Linux operating systems.
• Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.
• Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls.
• Experience supporting SOC 2 Type II audits, including control validation and evidence collection.
• Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.
• PowerShell scripting and KQL query skills for security operations, investigation, and automation.
• Ability to respond quickly to critical problems and willingness to participate in an on-call rotation.
• Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders.
• Understanding of adversary tactics and tooling (MITRE ATTACK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls.
• One or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP.

Work Location

This position may be based anywhere within the United States. Occasional travel is expected to data center facilities, customer locations, or BCC Software headquarters in Rochester, New York. Candidates who live within driving distance of the Rochester office are strongly preferred.

Physical Demands

This is primarily an office-based role requiring extended periods of sitting and frequent use of hands for typing, writing, and operating standard office equipment. The position requires effective verbal and written communication. Occasional standing, walking, bending, reaching, or lifting of office supplies or small equipment up to 25 pounds may be required. Visual acuity sufficient for reading, computer work, and document review is necessary. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

Position Type and Expected Hours of Work

This is a full-time, exempt position. Standard hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility for employees located elsewhere in the U.S., as coordinated with the manager. Because BCC Software supports operations and customers across U.S. time zones, staggered coverage may be advantageous. The role serves as the escalation contact for critical security incidents, including those raised by the managed detection and response provider, and participates in on-call rotation with defined after-hours response expectations. Periodic evening and weekend work is required for planned maintenance windows, security testing, and incident response.

AAP/EEO Statement

BCC Software provides equal employment opportunity to all individuals regardless of age, race, color, creed, religion, ancestry, sex (including pregnancy, childbirth or related medical conditions), gender, sexual orientation, gender identity or expression (including transgender status), national origin, veteran or military status, marital status, genetic information, physical or mental disability, familial status, reproductive health decisions, status as a victim of domestic violence, or any other basis protected by applicable laws and regulations. Further, the company takes affirmative action to ensure that all applicants and employees are treated without regard to any of these characteristics during the application process and/or employment. Discrimination of any type will not be tolerated.

BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, we combine deep postal expertise with modern technology to help our customers streamline operations, improve efficiency, and drive growth.

Originally posted on Himalayas

Responsibilities

Peraton is seeking a Lead Security Analyst to join our team of qualified, diverse professionals supporting the Health State and Local Sector. The ideal candidate will lead security analysis, compliance oversight, and risk management efforts across a complex, mission critical environment. This role plays a pivotal part in ensuring secure and compliant solutions, guiding vulnerability management activities, and supporting major modernization efforts for the Centers for Medicare & Medicaid Services (CMS). The Lead Security Analyst will help shape and maintain a robust security posture, ensuring that all program capabilities adhere to CMS and Federal security standards.

Lead Security Analyst’s responsibilities shall include, but are not limited to:

• Leading all security analysis, compliance, and oversight activities for the Program.• Conducting comprehensive security assessments, including evaluation of system architecture, data flows, interfaces, and inherited controls.• Developing, maintaining, and enforcing program-wide security policies, procedures, and documentation consistent with Federal and CMS security requirements.• Managing the program’s vulnerability assessment program, including vulnerability scanning, analysis, reporting, and coordination of remediation activities.• Leading the development of risk mitigation strategies and providing recommendations to address findings from scans, assessments, POA&Ms, and audits.• Preparing and supporting all security audits, reviews, and checkpoints, including CMS security assessments, FISMA reviews, and relevant ATO activities.• Ensuring security requirements are integrated into Agile development workflows, providing direct guidance to Scrum teams, architects, and developers.• Reviewing technical designs, user stories, and system enhancements for security impacts and compliance alignment.• Monitoring regulatory and CMS security updates to ensure program compliance remains current and accurate.• Collaborating with cross functional stakeholders including engineering, operations, compliance, and program leadership to ensure secure-by-design solution delivery.• Developing and delivering security awareness and compliance training tailored to the Program needs.• Maintaining accurate and up-to-date security documentation, dashboards, and metrics reporting for program leadership.

Qualifications

Basic Qualifications:

• 5 years with BS/BA; or 9 years with high school diploma.
• Demonstrated experience leading security analysis, compliance, and risk management activities for large-scale Federal programs.
• Strong understanding of Federal information security standards and frameworks such as FISMA, NIST SP 80053, NIST RMF, and CMS ARS.
• Hands-on experience conducting or managing vulnerability assessments, security scanning, POA&M lifecycle management, and risk mitigation planning.
• Experience preparing for and supporting Federal security audits, assessments, and ATO activities.
• Ability to review system designs, data flows, and architecture diagrams for security considerations and compliance alignment.
• Experience working directly with Agile teams and integrating security requirements into Agile SDLC processes.
• Excellent written and verbal communication skills, with the ability to communicate with both technical and nontechnical stakeholders.
• US. Citizenship required.
• Must have the ability to obtain and maintain a Public Trust clearance.

Preferred Qualifications:

• Experience supporting CMS programs, including familiarity with CMS ARS, ATO processes, and CMS governance expectations.
• Relevant security certifications such as CISSP, CISM, Security+, CEH, or equivalent.
• Experience with vulnerability management platforms, SIEM tools, and security automation technologies.
• Prior experience in healthcare IT and knowledge of compliance requirements such as HIPAA.
• Experience integrating or modernizing systems in environments with legacy system dependencies.
• Experience supporting large-scale, multi-team modernization or transformation initiatives.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

EEO

Originally posted on Himalayas

Description

About ITS:

Do you have the CHOPS? IT Solutions lives its values: Client Success is Our Success, Hungry for the Journey, Ownership Thinking, Passionate Problem Solving, and Surrender the Ego. If your values align, we want you to be a part of a fast-growing Managed Service Provider specializing in providing high-end technology solutions to small and mid-market businesses. IT Solutions is a nationally recognized leader in the IT space, with over 25 years of experience and thousands of satisfied clients. Join and grow with us, as we continue to innovate new ways to help businesses Experience Excellence.

Job Summary:

The Senior Security Analyst’s role is to monitor the security of computing environments and to help implement and maintain information security tools and systems. The Senior Security Analyst monitors security alerts and metrics and identifies small security issues and develops and recommends remediation plans before they turn into large ones. This primarily involves monitoring for new threats, deploying patches and updates to security systems, and other solutions to maintain and protect a client’s environment. The Senior Security Analyst is responsible for determining the scope of security cases that evolve from security alerts. This role recommends and then deploys a plan of action to stabilize them. This also involves providing reports on security posture, security tool health, and status and addressing alerts that may be indicative of a problem.

Requirements

Responsibilities:

• Support Security-as-a-Service operations
• Conduct endpoint security activities and advanced forensic investigations to determine root cause and impact
• Manage and coordinate responses to complex security incidents, ensuring timely containment, resolution, and documentation
• Identify, prioritize, and drive remediation of security issues
• Perform vulnerability assessments, analyze results, and provide recommendations to reduce risk exposure
• Deliver security awareness training and provide coaching to strengthen employee understanding of security practices
• Perform other related duties as assigned

Experience

Knowledge, Skills, and Abilities:

• Strong oral and written communication skills
• Effective time management and multi-tasking skills
• Maintains the ability to stay organized and be detail-oriented
• Demonstrates a passion for solving problems or helping others and take the initiative in driving continuous improvement/execution excellence
• Exceptional organizational skills, including the ability to self-manage and multi-task effectively and accurately in a fast-paced and dynamic environment

Experience:

• Bachelor's Degree, or equivalent level of experience in related field
• 10+ years of experience in information systems support, Information security, systems integration, or system administration
• Proven experience in technical documentation

Certificates, Licenses, Registrations:

• Security+ or equivalent information security certification

Compensation Package

ITS offers a full benefits package, including:

• Rich Medical and prescription plans
• Dental & Vision
• Paid Holidays and Flexible Paid Time Off
• 401K/401K Roth with Safe Harbor matching
• Stock Appreciation Rights
• Company-paid life insurance, long-term and short-term disability insurance
• Company-paid mental health support & financial wellness services
• FSA for medical and dependent care
• HSA option with compatible medical plan
• Company-paid training, materials, and exams
• Performance-based bonuses

IT Solutions is an equal employment opportunity employer that provides opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Originally posted on Himalayas

Job Description

As the Senior Security Analyst you will:

• Report to the Director of Security Engineering as a key member of the Information Security Team.

• Ensure comprehensive security testing on all company applications by utilizing vendors to conduct tests, and conducting their own security testing.

• Manage testing scheduling and portfolio of multiple company entities.

• Work with teams to perform security testing (including pentesting and architecture reviews) before applications go-live.

• Lead Static Scanning (SAST) service and triage results to advise development teams on remediation areas.

• Write documentation including policies and procedures

• Identify opportunities for improvement / automation.

• Communicate and train our Security Champions as part of effort to shift left

• Work with development teams to remediate and retest items until closure.

• Tracking applications to ensure they have the required level of testing depth and cadence

• Maintain and monitor Web Application Firewall (WAF) events and alerts

• Participate in the on-call roster, including hours outside of normal business

Key Responsibilities

What you’ll work on & what we’re looking for:

• As a security analyst, you’ll be working with team members across the Fuze Health environment in order to ensure that applications are tested and secured - with reviews prior to go-live.

• You’ll need a good understanding of computing / networking / cloud computing

• Problem solving, curiosity, and willingness to learn are key traits

• Be able to demonstrate a working knowledge of the above areas

Required Experience & Qualifications

What you need:

• Comfortable working in a fast-paced environment with excellent communication skills.

• Providing security recommendations on design and application development and coding.

• Strong technical skills in Linux and Windows operating systems, scripting languages like Python. Experience with application and infrastructure security as code.

• You should have ingenuity and strong problem-solving skills in order to swiftly and creatively deal with threats or flaws in networks.

• Candidates should be familiar with agile development processes and have experience integrating secure development practices into agile projects.

• Familiarity with industry standards and regulations including CIS, OWASP, HITRUST, ISO

• BS degree in Computer Science or related field.

• AWS certification at Associate and / or Speciality level preferred.

• Certifications such as OSCP, GWAPT, or GPEN preferred.

• Travel within the US may be required on an irregular basis (minimal travel)

• At least 4 years' relevant experience in the cybersecurity industry.

Additional Information

Additional Physical Job Requirements

Physical requirements for this role include the ability to work at a computer terminal with monitor, keyboard and mouse for extended periods of time, stoop, bend, and reach for equipment and supplies, make frequent repetitive motions required to operate a computer that include the wrists, hands and fingers, and lift, carry, push, pull, and move light objects up to 20 pounds. The role also requires the ability to effectively communicate through verbal interactions, discern auditory information, and visually perceive details to perform essential job functions.

Consistent with the Americans with Disabilities Act (ADA) and similar applicable state laws, it is Fuze Health’s policy to provide reasonable accommodation to enable qualified individuals with disabilities to perform essential job functions, unless such accommodation would cause an undue hardship.

Salary and Benefits

Salary Range: $128,800 - $161,000

Commission Eligible: No

Travel: No

Location Requirement:

• Fuze Health is limited to individuals residing in the following states: Alabama, Arizona, Arkansas, California, Colorado, Connecticut, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Maryland, Massachusetts, Michigan, Minnesota, Missouri, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Texas, Vermont, Virginia, Washington (WA), Wisconsin

Employment Authorization Requirement: Applicants must be authorized to work for any employer in the U.S. Alto Pharmacy, Fuze Health, LetsGetChecked, and Fuze Care Services can not take over, transfer, or sponsor any visa type at this time.

Benefits - Fuze Health

Full-time employee benefits include: dental, vision, and multiple group medical plans to choose from, a 401(k) retirement savings plan, group life insurance, accidental death and dismemberment (AD&D) insurance, flexible spending account (FSA) and health savings account (HSA), commuter benefits, employer-paid short-term (STD) and long-term disability (LTD) insurance, and additional supplemental insurance plans (spouse life insurance, legal insurance, an employee assistance program, home health testing kits, and a fertility medication discount program). Employees are also provided flexible vacation time, accrued paid sick time, 10 paid holidays, (2 floating holidays for full time non-exempt employees) , and eight weeks of paid parental leave for eligible employees, additional paid weeks for the birthing parent, 4 weeks paid caregiver leave, and a Lifestyle Spending Account allowance each month.

More Benefits Information Here: Fuze Health Benefits Site

The application deadline is August 31st 2026. This application deadline may be extended based on business needs.

Equal Opportunity Employer

Fuze Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, religion, sex, gender identity, sexual orientation, age, disability, veteran status, or any other legally protected basis. If you have a disability and require reasonable accommodation during any portion of the application or hiring process, please contact us at .

Fuze Health considers qualified applicants with arrest or conviction records for employment and conducts background checks consistent with applicable law, including the California, Los Angeles County, San Francisco, Philadelphia, and New York City Fair Chance laws. We are an E-Verify participating company.

Use of Automated Decision Tools

Fuze Health recruiters and hiring managers may use automated decision tools to help identify candidates who match the stated job requirements, and to what extent. These tools are designed to help ensure fairness in all aspects of the hiring process by providing recruiters and hiring managers with data-backed insights based on information provided in your resume, including work experience, education, and other skills. Fuze Health does not use automated decision tools to make hiring decisions; hiring decisions always involve human review and input. If you have any questions or would like to request an alternative process, please contact us at .

Privacy Notice

To learn about Fuze Health’s privacy practices, including compliance with applicable privacy laws, please read our Privacy Notice for Job Applicants.

Originally posted on Himalayas