{"id":2859987,"url":"https://alion.io/job/jrm-construction-management-cybersecurity-analyst","title":"Cybersecurity Analyst","company":{"id":678268,"name":"JRM Construction Management","domain":"jrmconstructionmanagement.com","url":"https://alion.io/company/jrmconstructionmanagement","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":69,"open_postings":37,"ghost_share":0.514,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":115000,"currency":"USD","period":"year","gross":null,"usd_annual":115000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-19T14:50:49Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-26T09:12:40Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":6},"description":"Company Overview\nAt JRM Construction, we build more than exceptional spaces - we build talented teams, rewarding careers, and trusted relationships. As a leading employee-owned construction firm, our people take ownership of every project and work collaboratively to deliver outstanding quality and a positive client experience. Guided by integrity, teamwork, continuous improvement, and genuine care for our people, JRM provides an environment where employees can grow and help shape the company’s long-term success.\nPosition Overview\nWe are seeking a Cybersecurity Analyst who combines a strong foundation in Windows-based IT administration with hands-on experience designing, implementing, and operating modern information security tools, alongside a governance-focused mindset. This role is critical to the success of our security operations and will play a key part in evaluating, testing, and deploying emerging technologies and new procedures, ensuring JRM remains proactive in an ever-evolving cybersecurity landscape. The ideal candidate is not only technically proficient but also highly organized, with the ability to manage multiple priorities, maintain detailed documentation, and uphold structured workflows. The Analyst also shares responsibility for incident response.\nReporting directly to the Manager of Information Security, this position offers an exciting opportunity for a security-minded technologist to thrive within a forward-thinking program that values agility, operational excellence, and continuous improvement.\nKey Responsibilities\nGovernance & Risk Management:\nAssist in developing, documenting, and enforcing cybersecurity policies, standards, and control procedures.\nSupport alignment with frameworks such as NIST CSF, ISO 27001, and CIS Controls.\nMaintain the security risk register and perform technical risk assessments and drive remediation to closure.\nWindows IT Administration & Hardening:\nLeverage expertise in Windows Server, Active Directory, DNS, Group Policy, and PowerShell to engineer, automate, and maintain secure system baselines.\nWork with the IT and infrastructure teams to ensure secure configurations and compliance enforcement across the environment.\nDeploy, configure, and tune endpoint management and compliance controls using modern UEM, MDM, and EDR tools.\nIdentity Security & Access Management:\nImplement identity governance practices, privileged access controls, phishing resistant MFA, and conditional access policy design across Microsoft Entra ID and other third-party IdPs.\nAutomate and improve lifecycle management processes, including secure onboarding and offboarding.\nPhishing Defense & Awareness:\nOperate a phishing simulation and security awareness platform, run phishing simulations, and report on campaign effectiveness.\nTriage user-reported phishing attempts and maintain IT communication templates and user education content.\nSecurity Engineering & Tooling:\nDesign, deploy, and maintain core security platforms, including EDR, SIEM, email security, and vulnerability management.\nMaintain configuration baselines and documentation for deployed security tools.\nIntegrate security tools with Microsoft 365, Entra ID, and the broader IT environment to improve visibility and reduce manual effort.\nRun vulnerability scanning, prioritize findings by risk, and coordinate remediation with IT and infrastructure teams.\nDetection, Incident Response & Automation:\nMonitor SIEM alerts and dashboards, and tune detections to reduce noise.\nAct as a technical responder in security incidents: triage, investigate, contain, and document root cause and lessons learned.\nSupport incident response playbooks and tabletop exercises.\nAutomate repetitive security tasks and response workflows using PowerShell, Python, and SOAR or automation platforms.\nInnovation & Emerging Technology Evaluation:\nParticipate in research, testing, and proof-of-concept (PoC) efforts for new cybersecurity tools, technologies, and frameworks.\nDeploy new technologies and procedures that improve detection, prevention, and governance.\nProvide technical input and analysis for tool evaluations, pilots, and strategic initiatives.\nQualifications\nRequired:\n3+ years of experience in IT administration, systems engineering, or information security, with a strong focus on Windows environments.\nFamiliarity with Microsoft 365, Entra ID (Azure AD), third-party IDP providers, Intune, and modern endpoint security tools.\nScripting and automation skills in PowerShell.\nUnderstanding of cybersecurity frameworks and governance models (NIST CSF, ISO 27001, CIS).\nAnalytical, collaborative, and adaptable mindset with strong documentation skills.\nPreferred:\nHands-on experience deploying, configuring, and tuning security tools such as EDR, email security, and vulnerability management platforms, or evaluating emerging and cloud security solutions.\nExposure to SIEM detection engineering and SOAR or automation platforms.\nExperience in risk assessments, audit preparation, or compliance reporting.\nFamiliarity with Python, SQL, or Bash/Shell for automation and security analysis.\nSalary Information\n To the extent this position is performed in New York City, the annual salary range for this role is $100,000 - $115,000.\nAll qualified applicants will receive consideration for employment at JRM without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristics protected by law. \nThe salary range listed in job postings reflects the Company’s good-faith estimate at the time of posting. Actual compensation may vary based on factors such as position tier, geographic location, work experience, market conditions, education/training, and skills.\n\nFor more information on how JRM Construction Management collects and uses your personal information, reference our Privacy Policy.","description_format":"text","description_chars":5888,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Management Consulting","Construction"],"lifecycle":[{"event":"open","at":"2026-10-19T15:58:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":77500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.601,"p_room":1,"age_days":6,"expected_fill_days":31,"reasons":["conf:1","stale_co","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":115000,"is_top_pay":false},"html_url":"https://alion.io/job/jrm-construction-management-cybersecurity-analyst","json_url":"https://alion.io/job/jrm-construction-management-cybersecurity-analyst.json","meta":{"generated_at":"2026-10-26T12:12:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16579,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678268},"rest":"https://alion.io/mcp/rest/get_company?id=678268"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjrm-construction-management-cybersecurity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjrm-construction-management-cybersecurity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjrm-construction-management-cybersecurity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jrm-construction-management-cybersecurity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjrm-construction-management-cybersecurity-analyst"}]}