Senior Cyber Security Analyst

IPG Photonics is seeking a highly motivated and experienced individual to join our growing Cybersecurity team. As a Cybersecurity Analyst, you will support the growth and operational security of this fast-paced, dynamic, high-tech manufacturing company by interfacing with business and IT resources to ensure the effective delivery of security services. The ideal candidate is a diligent, hardworking individual with broad range of cybersecurity and IT experience, who is willing and able to learn new skills and technologies to help ensure the team achieves its mission. The candidate must be able to work with little supervision and be determined to deliver outstanding work.

Duties:

• Keep abreast of current security threats, events, technologies, and vendors.
• Support the relationship with our Managed Detection and Response vendor as they provide us with Tier-1 and Tier-2 SOC services.
• Support the Tier-3 SOC function, monitoring events escalated by our MDR partner and working to resolve them or delegating them to regional IR team members.
• Develop tactics to help combat emerging threats.
• Proactively collect, assess, and leverage cyber threat intelligence to reduce IPG's risk exposure and increase the resilience of our firm when dealing with advanced threats.
• Provide technical expertise and guidance on cybersecurity issues.
• Configure and manage Microsoft Defender (Defender for Office 365, Endpoint, Identity, and Cloud Apps) to protect against threats.
• Implement and maintain security controls using Microsoft Entra ID (Azure AD), including Conditional Access, MFA, and identity governance.
• Monitor M365 security posture and implement improvements based on best practices.
• Respond to phishing, malware, and account compromise incidents within the M365 ecosystem.
• Implement and manage Microsoft Purview (Compliance Portal) including Data Loss Prevention (DLP), eDiscovery, and Information Protection.
• Configure sensitivity labels, retention policies, and insider risk management controls.
• Ensure compliance with relevant regulations (e.g., GDPR, HIPAA, SOC 2) using M365 compliance tools.
• Conduct regular audits of data access, sharing, and permissions.
• Educate users on phishing, data protection, and secure collaboration practices.
• Help write IT and Security related policies and procedures.