{"id":2971603,"url":"https://alion.io/job/bcc-software-security-analyst","title":"Security Analyst","company":{"id":672367,"name":"BCC Software","domain":"bccsoftware.com","url":"https://alion.io/company/bccsoftware","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"UTC-8 – UTC-5","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":100000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Copilot","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Mimikatz","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-20T15:49:52Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-29T00:38:06Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, we combine deep postal expertise with modern technology to help our customers streamline operations, improve efficiency, and drive growth.\n The Security Analyst supports BCC Software’s cybersecurity program by defining, validating, and reporting on security controls to protect company assets and sensitive information and reduce cyber risk. This role uses recognized frameworks, third-party audits, and defined service-level agreements to guide security governance, operations, and continuous improvement. IT owns day-to-day system administration.\nEssential Functions\nStrengthen identity security using Microsoft Entra ID, Conditional Access, phishing-resistant MFA, and Privileged Identity Management (PIM).\nIntegrate, deploy, support, and continuously improve security tools and the Microsoft security stack, including Defender XDR, Microsoft Sentinel and KQL, and Microsoft Intune security capabilities.\nOversee the managed detection and response (MDR) provider, including escalations, tuning, and service reviews.\nOwn the vulnerability and exposure management program, establish remediation SLAs, verify remediation evidence, and report status, exceptions, and risk trends.\nLead incident response and serve as the primary security contact during incidents; maintain playbooks, escalation procedures, tabletop exercises, and on-call expectations.\nEstablish Azure cloud security guardrails for landing zones and oversee Defender for Cloud, Azure Policy, and related cloud security controls.\nOwn data protection controls through Microsoft Purview sensitivity labeling and data loss prevention for customer data and personally identifiable information.\nEnforce the AI Usage Policy and govern risks associated with Microsoft Copilot oversharing, shadow AI, and SaaS discovery.\nManage third-party and vendor security risk, including due diligence, recurring reviews, evidence collection, and customer security questionnaires.\nManage security ticket workflows for access reviews and phishing reports; define response SLAs and verify supporting evidence.\nCreate and maintain security documentation, including policies, the risk register, incident response records, and audit evidence.\nAlign the security program with NIST Cybersecurity Framework (CSF) 2.0, CIS Controls, SOC 2 Type II, USPS licensing security requirements, and cyber insurance attestations.\nValidate ransomware resilience through evidence of immutable backups and recurring recovery testing.\nManage the security awareness training program and work across teams to reinforce security policies, controls, monitoring, and best practices.\nProvide backup support for network, server, and cloud administration as needed, without assuming primary responsibility for routine administration.\nAssist with security-related budgets and purchases.\nServe as liaison with security and IT professionals at BlueCrest and Platinum.\nDevelop and manage security reports and dashboards for management.\n 5+ years of cybersecurity operations experience or equivalent experience.\nStrong understanding of secure network architecture and networking principles.\nKnowledge of Windows, macOS, and Linux operating systems.\nHands-on security experience with Microsoft 365 and Microsoft Azure, including Entra ID, Conditional Access, phishing-resistant MFA, PIM, Defender XDR, Microsoft Sentinel, Microsoft Intune security capabilities, Defender for Cloud, and Azure Policy.\nAbility to review the security configuration and risk posture of network infrastructure, including Juniper and Cisco switches and Fortinet firewalls.\nExperience supporting SOC 2 Type II audits, including control validation and evidence collection.\nFamiliarity with NIST Cybersecurity Framework (CSF) 2.0 and CIS Controls.\nPowerShell scripting and KQL query skills for security operations, investigation, and automation.\nAbility to respond quickly to critical problems and willingness to participate in an on-call rotation.\nStrong written and verbal communication skills, including the ability to define security SLAs, evaluate evidence, report risk, and communicate requirements to technical and business stakeholders.\nUnderstanding of adversary tactics and tooling (MITRE ATTACK; e.g., Cobalt Strike and Mimikatz) sufficient to detect, hunt, and validate controls.\nOne or more relevant security certifications are preferred, including Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), Identity and Access Administrator Associate (SC-300), or CISSP.\n Work Location\nThis position may be based anywhere within the United States. Occasional travel is expected to data center facilities, customer locations, or BCC Software headquarters in Rochester, New York. Candidates who live within driving distance of the Rochester office are strongly preferred.\nPhysical Demands\nThis is primarily an office-based role requiring extended periods of sitting and frequent use of hands for typing, writing, and operating standard office equipment. The position requires effective verbal and written communication. Occasional standing, walking, bending, reaching, or lifting of office supplies or small equipment up to 25 pounds may be required. Visual acuity sufficient for reading, computer work, and document review is necessary. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.\nPosition Type and Expected Hours of Work\nThis is a full-time, exempt position. Standard hours are Monday through Friday, 8:00 a.m. to 5:00 p.m. Eastern Time, with time zone flexibility for employees located elsewhere in the U.S., as coordinated with the manager. Because BCC Software supports operations and customers across U.S. time zones, staggered coverage may be advantageous. The role serves as the escalation contact for critical security incidents, including those raised by the managed detection and response provider, and participates in on-call rotation with defined after-hours response expectations. Periodic evening and weekend work is required for planned maintenance windows, security testing, and incident response.\nAAP/EEO Statement\nBCC Software provides equal employment opportunity to all individuals regardless of age, race, color, creed, religion, ancestry, sex (including pregnancy, childbirth or related medical conditions), gender, sexual orientation, gender identity or expression (including transgender status), national origin, veteran or military status, marital status, genetic information, physical or mental disability, familial status, reproductive health decisions, status as a victim of domestic violence, or any other basis protected by applicable laws and regulations. Further, the company takes affirmative action to ensure that all applicants and employees are treated without regard to any of these characteristics during the application process and/or employment. Discrimination of any type will not be tolerated.","description_format":"text","description_chars":7172,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Custom Software Development","Accounting & Tax Software"],"lifecycle":[{"event":"open","at":"2026-10-21T02:46:43Z"}],"visa":[],"liveness":{"score":50,"band":"ok","label":"Likely open","p_open":1,"p_active":0.86,"p_room":0.578,"age_days":7,"expected_fill_days":7,"reasons":["conf:4","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/bcc-software-security-analyst","json_url":"https://alion.io/job/bcc-software-security-analyst.json","meta":{"generated_at":"2026-10-29T03:53:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5903,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":672367},"rest":"https://alion.io/mcp/rest/get_company?id=672367"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbcc-software-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbcc-software-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbcc-software-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bcc-software-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbcc-software-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2971603}},{"tool":"search_jobs","arguments":{"company":"bccsoftware.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2971603},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}