Cyber Security Analyst

Help protect critical infrastructure at a growing technology-focused division of IES Holdings. Under the direction of the IT Manager, the Cybersecurity Analyst will be a key member of our divisional IT team, responsible for proactively protecting our organization's information assets, systems, infrastructure, and people from evolving cyber threats. This individual will lead efforts in proactively monitoring and strengthening the company’s information security posture across a broad range of domains—including endpoint, infrastructure, application, and cloud security. The role requires independent execution, strong technical competency, hands-on technical engagement, a commitment to process improvement, and adherence to SOC 2, NIST, and ISO 27001 frameworks. You will collaborate closely with other IT professionals and the broader IES Holdings Cybersecurity teams. This role primarily operates during standard business hours, with occasional requirements for on-call support to address critical security incidents.

Job Duties and Responsibilities :

• Continuously monitor and investigate security alerts using SIEM (e.g., Microsoft Sentinel), EDR (e.g., SentinelOne, Microsoft Defender for Endpoint), IDS / IPS, and firewall systems across on-premises and cloud environments, escalating when necessary.
• Own identity and access management (IAM) workflows across Active Directory, Entra ID, Microsoft 365, and Azure.
• Manage, optimize, and support the implementation and maintenance of endpoint protection tools (such as SentinelOne, Microsoft Defender for Endpoint, and Defender for Identity) and other cybersecurity controls.
• Perform vulnerability scans and analyze vulnerabilities across infrastructure, endpoints, and applications; coordinate and track remediation plans with internal IT teams and vendors.
• Conduct thorough root-cause analysis for security incidents; lead or support containment, eradication, and recovery actions, ensuring appropriate urgency and documentation.
• Develop scripts (PowerShell preferred, Python also valuable) to automate common security tasks, log analysis, reporting, and incident response.
• Enforce and maintain compliance with company security policies and industry standards such as SOC 2, NIST 800-53, and ISO 27001, by assisting with documentation, audits, and training.
• Conduct proactive risk assessments, assist with third-party security reviews, and support the enforcement of IT security policies.
• Collaborate with internal IT teams to ensure secure configurations of systems, networks, and applications.
• Support the IT Manager in developing security roadmaps, maintaining incident response playbooks, and contributing to security policy development.
• Contribute to enterprise security initiatives, including phishing simulations and coordination of penetration tests.
• Train end-users on security awareness topics and phishing simulation results, as needed.
• Assist with the configuration and maintenance of Intune-based security policies for endpoint compliance.
• Perform other security-related responsibilities as assigned.

Required Qualifications :

Preferred Qualifications :

Our Ideal Candidate Will Be :

Growth Potential : This role offers the opportunity to advance into senior cybersecurity or IT leadership roles over time.