Job description

Company Overview At JRM Construction, we build more than exceptional spaces - we build talented teams, rewarding careers, and trusted relationships. As a leading employee-owned construction firm, our people take ownership of every project and work collaboratively to deliver outstanding quality and a positive client experience. Guided by integrity, teamwork, continuous improvement, and genuine care for our people, JRM provides an environment where employees can grow and help shape the company’s long-term success. Position Overview We are seeking a Cybersecurity Analyst who combines a strong foundation in Windows-based IT administration with hands-on experience designing, implementing, and operating modern information security tools, alongside a governance-focused mindset. This role is critical to the success of our security operations and will play a key part in evaluating, testing, and deploying emerging technologies and new procedures, ensuring JRM remains proactive in an ever-evolving cybersecurity landscape. The ideal candidate is not only technically proficient but also highly organized, with the ability to manage multiple priorities, maintain detailed documentation, and uphold structured workflows. The Analyst also shares responsibility for incident response. Reporting directly to the Manager of Information Security, this position offers an exciting opportunity for a security-minded technologist to thrive within a forward-thinking program that values agility, operational excellence, and continuous improvement. Key Responsibilities Governance & Risk Management: Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures. Support alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls. Maintain the security risk register and perform technical risk assessments and drive remediation to closure. Windows IT Administration & Hardening: Leverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines. Work with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment. Deploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools. Identity Security & Access Management: Implement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs. Automate and improve lifecycle management processes, including secure onboarding and offboarding. Phishing Defense & Awareness: Operate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness. Triage user-reported phishing attempts and maintain IT communication templates and user education content. Security Engineering & Tooling: Design, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management. Maintain configuration baselines and documentation for deployed security tools. Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort. Run vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams. Detection, Incident Response & Automation: Monitor SIEM alerts and dashboards, and tune detections to reduce noise. Act as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned. Support incident response playbooks and tabletop exercises. Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms. Innovation & Emerging Technology Evaluation: Participate in research, testing, and proof-of-concept (PoC) efforts for new cybersecurity tools, technologies, and frameworks. Deploy new technologies and procedures that improve detection, prevention, and governance. Provide technical input and analysis for tool evaluations, pilots, and strategic initiatives. Qualifications Required: 3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments. Familiarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools. Scripting and automation skills in PowerShell. Understanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS). Analytical, collaborative, and adaptable mindset with strong documentation skills. Preferred: Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions. Exposure to SIEM detection engineering and SOAR or automation platforms. Experience in risk assessments, audit preparation, or compliance reporting. Familiarity with Python, SQL, or Bash/Shell for automation and security analysis. Salary Information To the extent this position is performed in New York City, the annual salary range for this role is $100,000 - $115,000. All qualified applicants will receive consideration for employment at JRM without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristics protected by law. The salary range listed in job postings reflects the Company’s good-faith estimate at the time of posting. Actual compensation may vary based on factors such as position tier, geographic location, work experience, market conditions, education/training, and skills. For more information on how JRM Construction Management collects and uses your personal information, reference our Privacy Policy .

Requirements

Must-haves

Company Overview
Assist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures.
Support alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls.
Maintain the security risk register and perform technical risk assessments and drive remediation to closure.
Leverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines.
Work with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment.
Deploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools.
Implement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs.
Automate and improve lifecycle management processes, including secure onboarding and offboarding.
Operate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness.
Triage user-reported phishing attempts and maintain IT communication templates and user education content.
Design, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management.
Maintain configuration baselines and documentation for deployed security tools.
Integrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort.
Run vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams.
Monitor SIEM alerts and dashboards, and tune detections to reduce noise.
Act as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned.
Support incident response playbooks and tabletop exercises.
Automate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms.

Nice-to-haves

Hands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions.
Exposure to SIEM detection engineering and SOAR or automation platforms.
Experience in risk assessments, audit preparation, or compliance reporting.
Familiarity with Python, SQL, or Bash/Shell for automation and security analysis.
For more information on how JRM Construction Management collects and uses your personal information, reference our Privacy Policy .

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonazuresql

Platform: greenhouse
Effort: quick