IT Security Analyst

Administer and optimize Microsoft Sentinel: data connectors, analytics rules, workbooks, automation (playbooks/Logic Apps), and log retention Monitor, triage, and investigate security alerts; tune detections to reduce noise and improve coverage Lead incident response end-to-end: containment, forensics coordination, root-cause analysis, and post-incident reporting to leadership. Maintain and exercise incident response playbooks and the escalation matrix Monitor threat intelligence relevant to the construction and engineering sector and translate it into actionable controls

Vulnerability & Risk Management

Run the vulnerability management program: scanning, prioritization, remediation tracking, and reporting across endpoints, servers, cloud workloads, and network infrastructure Conduct security risk assessments for new systems, vendors, and projects; provide clear, business-relevant recommendations

Security Architecture & Engineering

Harden and govern the Microsoft 365 and Azure environments: Entra ID (conditional access, MFA, privileged identity management), Defender suite, Purview/DLP, Intune, and Azure security baselines Manage and maintain Palo Alto Networks firewalls and related services (Panorama, Global Protect, threat prevention, URL filtering); review rule bases and support network segmentation

Governance & Compliance

Maintain security policies, standards, and procedures; ensure alignment with NARHQ security requirements

Awareness & Enablement

Own the security awareness and phishing simulation program Act as a trusted security advisor to internal stakeholders and mentor junior IT staff on security practices

Bachelor’s degree in computer science, Information Security, or related field, or equivalent practical experience 5+ years of progressive IT experience, with at least 2 years focused on information security Hands-on experience with SIEM, EDR/XDR, and vulnerability management platforms, including detection tuning and alert investigation Proven incident response experience, including leading investigations end-to-end Working knowledge of NIST CSF, ISO 27001, and CIS Controls Strong written and verbal communication skills, with the ability to explain risk to non-technical executives and write clear reports and policies Ability to work independently and prioritize in a lean IT team, Hands-on experience with Microsoft Azure and Microsoft 365 security (Entra ID, Defender for Endpoint/Identity/Office 365, Purview, Intune) Hands-on experience with Microsoft Sentinel (KQL, analytics rules, playbooks, workbooks) Hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama, GlobalProtect) One or more of: CISSP, CISM, GCIH, GCIA, GSEC, CySA+, Microsoft SC-200/SC-100, or Palo Alto PCNSA/PCNSE

Applicants must be authorized to work in the United States. This position is not eligible for sponsorship. ANTICIPATED SALARY RANGE : $150,000 - $180,000 /YR DOE In accordance with California state law, Obayashi Corporation is committed to providing clear and transparent information regarding the compensation for this position. The final salary offered will be based on various factors, including the candidate’s qualifications, experience, skills, and relevant market considerations. This salary range reflects what we reasonably expect to pay for this role within California. Compensation in other states may vary based on local market conditions and applicable regulations. We strive to offer competitive and fair compensation across all locations. BENEFITS : Obayashi Offers Competitive Market Salaries and Benefits Package including:

Medical, Dental, and Vision Plan Employee Assistance Program Life Insurance Health Savings Account Flexible Spending Account Dependent Care Flexible Spending Account Disability Insurance Paid Holidays Paid Time Off 401(k) Plan Matching

About the Role Obayashi North America (NARHQ) is the North American Regional Headquarters of Obayashi Corporation, one of the world’s largest construction and engineering companies. We are hiring a Senior IT Security Analyst to serve as the hands-on technical lead for NARHQ’s information security program. The role is onsite full-time (5 days/week). The successful candidate will own day-to-day security operations, lead incident response, drive vulnerability and risk management, and help mature security governance. Our environment is Microsoft-centric (Azure, Microsoft 365, Microsoft Sentinel) with a Palo Alto Networks perimeter, and this role will be central to hardening and continuously improving that environment. Key Responsibilities Security Monitoring & Incident Response, Employee benefits are 100% covered by Obayashi and family coverage is covered at 80%. About Obayashi Obayashi Corporation has delivered quality solutions to infrastructure challenges across the globe for more than 130 years. Founded in 1892, Obayashi is the largest Japanese Contractor and is the fourth-largest international contractor conducting business in the United States. Obayashi has been operating and completing projects in the United States since 1979. Obayashi provides a full range of general contractor services in both public works and private sectors including: office buildings, residences, tunnels, highways, rail systems, bridges, artificial islands, airports and nuclear power plants. Other services include urban planning and architecture, real estate and property development, environmental, and waste services. The North American Operations consolidated revenue is over $3 billion in the United States and Canada. Equal Opportunity Employer Obayashi Corporation is