smartrecruiters
Security Analyst
BCC Software
Pittsford, USA
Full-time
Mid · 5+ years experience
Remote
Discovered 2 days ago
azurelinuxpowershell
Key Skills for This Role
azurelinuxpowershell
Full Job Posting
Work Location
- This position may be based anywhere within the United States. Occasional travel is expected to data center facilities, customer locations, or BCC Software headquarters in Rochester, New York. Candidates who live within driving distance of the Rochester office are strongly preferred. Physical Demands
- This is primarily an office-based role requiring extended periods of sitting and frequent use of hands for typing, writing, and operating standard office equipment. The position requires effective verbal and written communication. Occasional standing, walking, bending, reaching, or lifting of office supplies or small equipment up to 25 pounds may be required. Visual acuity sufficient for reading, computer work, and document review is necessary. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.
- Position Type and Expected Hours of Work
- This is a full-time, exempt position. Standard hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility for employees located elsewhere in the U.S., as coordinated with the manager. Because BCC Software supports operations and customers across U.S. time zones, staggered coverage may be advantageous. The role serves as the escalation contact for critical security incidents, including those raised by the managed detection and response provider, and participates in on-call rotation with defined after-hours response expectations. Periodic evening and weekend work is required for planned maintenance windows, security testing, and incident response.
- AAP/EEO Statement
- BCC Software provides equal employment opportunity to all individuals regardless of age, race, color, creed, religion, ancestry, sex (including pregnancy, childbirth or related medical conditions), gender, sexual orientation, gender identity or expression (including transgender status), national origin, veteran or military status, marital status, genetic information, physical or mental disability, familial status, reproductive health decisions, status as a victim of domestic violence, or any other basis protected by applicable laws and regulations. Further, the company takes affirmative action to ensure that all applicants and employees are treated without regard to any of these characteristics during the application process and/or employment. Discrimination of any type will not be tolerated.
- BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, we combine deep postal expertise with modern technology to help our customers streamline operations, improve efficiency, and drive growth.
Qualifications
- 5+ years of cybersecurity operations experience or equivalent experience.
- Strong understanding of secure network architecture and networking principles.
- Knowledge of Windows, macOS, and Linux operating systems.
- Hands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.
- Ability to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls.
- Experience supporting SOC 2 Type II audits, including control validation and evidence collection.
- Familiarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.
- PowerShell scripting and KQL query skills for security operations, investigation, and automation.
- Ability to respond quickly to critical problems and willingness to participate in an on-call rotation.
- Strong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders.
- Understanding of adversary tactics and tooling (MITRE ATTACK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls.
- One or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP.
About BCC Software
Software & SaaS134 employeesFounded 1978
Private postal software and data-services company helping mailers and direct marketers prepare compliant, lower-cost mail.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer