> Markdown version of [/jobs/ext/3844815-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/3844815-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Analyst

- **Company:** Obayashi USA, LLC
- **Location:** Foster City, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Cyber Security, Identity and Access Management, Intrusion Detection and Prevention, Microsoft Office, Network Architecture, Network Segmentation, Cloud Services, Anti-Phishing, Kusto Query Language, Security Information and Event Management, Simulation Software, Software Vulnerability Management, Microsoft Power Automate, Microsoft InTune, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Palo Alto Networks, Microsoft Sentinel, CIS Benchmarks, Network Server
- **Published:** October 20, 2026
- **Apply:** https://www.juju.com/job/23_A6B8F7E0DD95DCC42C149823C99E4CEB

## About the Role

Bachelor's degree in computer science, Information Security, or related field, or equivalent practical experience 5+ years of progressive IT experience, with at least 2 years focused on information security Hands-on experience with SIEM, EDR/XDR, and vulnerability management platforms, including detection tuning and alert investigation Proven incident response experience, including leading investigations end-to-end Working knowledge of NIST CSF, ISO 27001, and CIS Controls Strong written and verbal communication skills, with the ability to explain risk to non-technical executives and write clear reports and policies Ability to work independently and prioritize in a lean IT team, Hands-on experience with Microsoft Azure and Microsoft 365 security (Entra ID, Defender for Endpoint/Identity/Office 365, Purview, Intune) Hands-on experience with Microsoft Sentinel (KQL, analytics rules, playbooks, workbooks) Hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama, GlobalProtect) One or more of: CISSP, CISM, GCIH, GCIA, GSEC, CySA+, Microsoft SC-200/SC-100, or Palo Alto PCNSA/PCNSE

## Description

Administer and optimize Microsoft Sentinel: data connectors, analytics rules, workbooks, automation (playbooks/Logic Apps), and log retention Monitor, triage, and investigate security alerts; tune detections to reduce noise and improve coverage Lead incident response end-to-end: containment, forensics coordination, root-cause analysis, and post-incident reporting to leadership. Maintain and exercise incident response playbooks and the escalation matrix Monitor threat intelligence relevant to the construction and engineering sector and translate it into actionable controls

Vulnerability & Risk Management

Run the vulnerability management program: scanning, prioritization, remediation tracking, and reporting across endpoints, servers, cloud workloads, and network infrastructure Conduct security risk assessments for new systems, vendors, and projects; provide clear, business-relevant recommendations

Security Architecture & Engineering

Harden and govern the Microsoft 365 and Azure environments: Entra ID (conditional access, MFA, privileged identity management), Defender suite, Purview/DLP, Intune, and Azure security baselines Manage and maintain Palo Alto Networks firewalls and related services (Panorama, Global Protect, threat prevention, URL filtering); review rule bases and support network segmentation

Governance & Compliance

Maintain security policies, standards, and procedures; ensure alignment with NARHQ security requirements

Awareness & Enablement

Own the security awareness and phishing simulation program Act as a trusted security advisor to internal stakeholders and mentor junior IT staff on security practices