Security & Compliance Analyst

Davis-Standard is a global leader in extrusion and converting technology, with manufacturing, service, and customer support operations spanning North America, Europe, Asia, and South America.

We are seeking an experienced Cybersecurity Specialist to support and enhance the security of Davis-Standard's global information systems, cloud platforms, network infrastructure, and manufacturing technology environments. This role serves as a technical cybersecurity resource responsible for advanced investigation, incident response coordination, vulnerability management, security engineering initiatives, and continuous improvement of the company's security posture.

The Cybersecurity Specialist partners closely with infrastructure teams, regional IT teams, managed security providers, business stakeholders, and the India-based Security Operations Analyst to identify, investigate, remediate, and prevent cybersecurity risks across the organization.

Responsibilities

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.


• Serve as the primary technical escalation point for alerts generated by managed SOC providers and internal monitoring systems.


• Perform threat analysis, forensic review, root cause analysis, and security event investigations.


• Coordinate containment, eradication, recovery, and post-incident review activities.


• Improve detection capabilities through tuning, rule development, and operational process improvements.


• Own technical vulnerability management processes including prioritization, risk assessment, remediation guidance, validation, and exception review.


• Partner with infrastructure, application, and business teams to reduce organizational risk.


• Review vulnerability trends and provide remediation recommendations.


• Assist with penetration testing, security assessments, and remediation planning.

• Deploy, maintain, and improve cybersecurity technologies including:




• Endpoint Detection & Response (EDR)


• Identity and Access Management


• Multi-Factor Authentication


• Email Security


• Network Security Controls


• Security Monitoring Platforms




• Develop and maintain security standards, baselines, and technical controls.


• Participate in Zero Trust and security architecture initiatives.

• Support security audits, assessments, compliance initiatives, and evidence validation.


• Assist with policy development and control implementation.


• Contribute to risk assessments, vendor security reviews, and security governance activities.

• Review escalated investigations and provide technical direction.


• Maintain incident response procedures, runbooks, and investigation standards.


• Provide security metrics, reporting, and recommendations to leadership.

Qualifications

Required

• 5+ years of cybersecurity, systems administration, security operations, or infrastructure security experience.


• Experience investigating security incidents and conducting root cause analysis.


• Experience with Microsoft 365 security technologies and Entra ID.


• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.


• Understanding of incident response methodologies and cyber threat detection.


• Strong communication, analytical, and documentation skills.

 Preferred

• CrowdStrike


• Microsoft Defender Security Stack


• Microsoft Intune


• Duo MFA


• Zscaler


• SIEM platforms


• Manufacturing or industrial environments


• Security+, CySA+, CISSP, GSEC, SC-200, SC-300, AZ-500, or equivalent certifications