McLane Global
Cybersecurity Analyst
McLane GlobalUnited States11 hours ago
Full-timeRemote FriendlyInformation Technology
As one of the world's largest food-grade logistics companies, McLane Global relies on the efficiency of its fulfillment centers. We consider all our warehouses to be systematic and operate with a customer-centric mentality. To deliver on our promise to customers, we rely on exceptionally talented, bright, and committed people. We cultivate and embrace a diverse employee population. We recognize that people with diverse backgrounds, experiences and perspectives fuel our growth and enrich our global culture. The Cybersecurity Analyst at McLane Global is responsible for securing and monitoring all IT systems, integrations, and cloud environments supporting enterprise operations. This role ensures the confidentiality, integrity, and availability of data by implementing security controls, enforcing access policies, conducting monitoring activities, and maintaining compliance with federal cybersecurity frameworks.

Key Responsibilities:

  • Administer Microsoft Entra ID (Azure AD) tenancy, including user lifecycle management, RBAC, MFA, Conditional Access, and privileged identity governance.
  • Implement least-privilege principles and enforce identity protection policies aligned with federal cybersecurity requirements.
  • Perform periodic entitlement reviews, access recertifications, and audit-ready documentation in accordance with NIST/FedRAMP standards.
  • Monitor Microsoft 365, Azure, and hybrid workloads using Sentinel, Defender for Cloud, and Defender for Identity to detect vulnerabilities, threats, and anomalous activity.
  • Maintain centralized log ingestion, retention, and reporting across D365, TMS, and cloud services to support IR, compliance, and audit readiness.
  • Investigate security incidents, coordinate escalation, perform root-cause analysis, and drive remediation activities to closure.
  • Implement and maintain information security controls aligned with FISMA, FedRAMP Moderate, NIST SP 800-53/171, and CMMC requirements.
  • Support development and maintenance of System Security Plans (SSPs), POA&Ms, risk registers, and continuous monitoring artifacts.
  • Ensure third-party SaaS and hosted service providers meet applicable ATO, FedRAMP, and vendor risk management requirements.
  • Secure integrations between Microsoft Dynamics 365 Finance & Operations, Transportation Management Systems, Azure services, and Power Platform.
  • Execute vulnerability scanning, penetration testing coordination, patch compliance, and system hardening following STIG, CIS, or Microsoft security baselines.
  • Enforce cryptographic standards including TLS 1.2+, hashing, and key management to protect data in transit and at rest.
  • Maintain and mature the Incident Response Plan (IRP) and participate in incident handling aligned with NIST CSF and 800-61 guidance.
  • Support continuity and disaster recovery planning, including RTO/RPO validation, backup integrity checks, and high-availability testing in Microsoft cloud and hybrid environments.
  • Lead or participate in annual tabletop exercises, continuity drills, and mock security incidents.
  • Produce compliance, SIEM, and vulnerability management reports for leadership, auditors, and government stakeholders.
  • Document change management, incident tickets, and remediation actions in accordance with audit and ATO requirements.
  • Present security posture updates and risk recommendations

Requirements

  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field.
  • 3-5 years of information security experience supporting Microsoft cloud or hybrid enterprise environments.
  • Working knowledge of NIST, FedRAMP, FISMA, and ISO 27001 frameworks; familiarity with ATO and continuous monitoring processes is a plus.
  • Experience with Microsoft security technologies such as Azure AD/Entra, Microsoft 365 Security, Azure Sentinel, Defender Suite, MDM/MAM, and SIEM tools.
  • Ability to analyze logs, detect indicators of compromise, and respond to security incidents.
  • Preferred certifications: CompTIA Security+, Microsoft SC-900/SC-200/SC-300, CEH,SC-900, SC-200, SC-300 or equivalent.

Benefits

  • Competitive base compensation
  • Full Benefits including Medical, Dental and Vision effective on the first day of employment
  • 401(k) with Employer Match (quarterly enrollment)
  • Paid Holidays (no waiting period to receive holiday pay)
  • Paid vacation, personal, and sick days effective on first day of employment
  • All offers are contingent upon passing a background check and drug screening
  • No company visa sponsorships
  • No phone call or walk in inquiries for this position, apply online to be considered

Disclaimer

Employees must be able to perform the essential functions of the position satisfactorily and if requested, reasonable accommodation will be provided to enable employees with disabilities to perform the essential functions of their job, absent undue hardship.

Furthermore, job descriptions typically change over time as requirements and employee skill levels change. The Employer retains the right to change or assign other duties to this position.

Key Skills

Ranked by relevance
Apply