Security Analyst - Miller Electric Company

About Us

We design, install, and maintain advanced electrical systems. Our expertise spans traditional electrical contracting, security solutions, audio-visual integration, wireless networking, and building management systems.

Job Summary

Are you looking for a rewarding career as a Security Analyst?

Do you thrive in a team-focused environment where serving others is at the heart of what you do? If so, you may have just found your ideal opportunity.

For nearly 90 years, Miller Electric Company has been a proud signatory contractor with the IBEW, employing the most experienced and highly trained workforce in the industry. Our success is rooted in our core values—trust, collaboration, safety, quality, community, and stewardship—and in how we bring these values to life every day.

The Security Analyst is responsible for protecting the organization's systems, endpoints, networks, identities, and data through proactive monitoring, vulnerability management, incident response, security governance, and compliance oversight. The Security Analyst serves as the primary owner of the organization's Cybersecurity Maturity Model Certification (CMMC) program and works closely with EMCOR Security Operations (SecOps) to ensure alignment with enterprise security standards, regulatory requirements, and cybersecurity best practices.

This role acts as the local security lead for Miller Electric, partnering with IT Operations, Infrastructure, Network Operations, and EMCOR SecOps to strengthen the organization's security posture while maintaining compliance with CMMC, NIST 800-171, and other applicable security frameworks.

Essential Duties & Responsibilities

Security Operations & Incident Response

• Monitor, investigate, and respond to cybersecurity alerts, suspicious activity, and security incidents.
• Coordinate incident response and remediation activities with EMCOR Security Operations (SecOps).
• Perform threat analysis, root cause investigations, and security event documentation.
• Escalate critical security risks and vulnerabilities as required.
• Support organizational threat detection and response initiatives.

CMMC Compliance Program Management

• Serve as the primary owner and coordinator of the organization's CMMC compliance program.
• Lead efforts to maintain compliance with CMMC, NIST 800-171, and other applicable cybersecurity requirements.
• Manage and maintain System Security Plans (SSPs), Plans of Action & Milestones, policies, procedures, and supporting compliance documentation.
• Coordinate internal assessments, audit preparation, evidence collection, and external compliance reviews.
• Track remediation efforts and ensure compliance gaps are addressed within established timelines.
• Provide compliance status reporting and audit readiness updates to IT leadership.
• Collaborate with EMCOR SecOps and business stakeholders to ensure required controls remain documented, implemented, and effective.

Vulnerability & Risk Management

• Manage vulnerability identification, prioritization, tracking, and remediation activities.
• Utilize vulnerability management solutions to identify and reduce organizational risk.
• Partner with IT teams to remediate vulnerabilities and validate corrective actions.
• Participate in risk assessments and security reviews of systems, applications, and infrastructure.

Security Platform Administration

• Partner closely with EMCOR SecOps in the administration and monitoring of enterprise security tools.
• Utilize and support platforms including:
• Tanium
• Tenable
• Cortex XDR
• Microsoft Azure / Entra ID
• Microsoft Defender
• Microsoft Intune
• ScreenMeet
• Monitor security dashboards and reports to identify emerging threats and compliance concerns.
• Assist with security tool implementation, configuration, and ongoing improvements.

Endpoint Security Management

• Monitor endpoint security posture and compliance across all managed devices.
• Support endpoint hardening, encryption, and security baseline initiatives.
• Investigate non-compliant devices and coordinate remediation activities.
• Ensure endpoint protection technologies remain effective and properly configured.

Identity & Access Management

• Support identity security initiatives within Microsoft Azure and Entra ID.
• Assist with MFA, Conditional Access, privileged access management, and identity governance activities.
• Participate in user access reviews and security audits.
• Ensure access controls follow least-privilege and security best practices.

Security Awareness & Training

• Develop cybersecurity awareness content and employee security communications.
• Coordinate phishing simulations and user awareness campaigns.
• Create and maintain security-related knowledge base documentation.
• Promote security best practices across the organization.

Governance & Documentation

• Maintain security policies, standards, procedures, and operational documentation.
• Prepare security metrics, compliance reports, and executive summaries.
• Support internal and external audit activities.
• Maintain accurate records related to incidents, vulnerabilities, remediation efforts, and compliance initiatives.

Collaboration & Project Support

• Collaborate with EMCOR Security Operations, Infrastructure, Network Operations, Service Desk, and Project Teams.
• Participate in technology deployments, mergers, acquisitions, and business integrations from a security perspective.
• Review new technologies, vendors, and applications for security and compliance considerations.
• Ensure security requirements are incorporated into project planning and execution.

Qualifications

Required

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• Experience managing security technologies and vulnerability remediation efforts.
• Strong understanding of cybersecurity principles, cloud technologies, networking, and risk management.
• Excellent analytical, troubleshooting, communication, and documentation skills.
• Strong communication skills and business acumen.

Preferred

• Security+, CySA+, CISSP, SSCP, ISC2 CC, or equivalent cybersecurity certifications.
• Experience with:
• Tanium
• Tenable
• Cortex XDR
• Microsoft Defender
• Microsoft Intune
• Microsoft Azure / Entra ID
• ScreenMeet
• Experience supporting CMMC and NIST 800-171 compliance initiatives.
• Experience working with audit preparation and regulatory compliance programs.

Core Competencies

• Security Operations
• Incident Response
• Vulnerability Management
• CMMC Program Administration
• NIST 800-171 Compliance
• Risk Management
• Endpoint Security
• Identity & Access Management
• Security Awareness
• Audit Readiness
• Technical Documentation
• Cross-Functional Collaboration

Success Measures

• Successful ownership and administration of the organization's CMMC compliance program.
• Continuous readiness for CMMC assessments and compliance reviews.
• Timely response and remediation of security incidents.
• Reduction of organizational vulnerabilities and security risks.
• Improvement in endpoint compliance and overall security posture.
• Positive audit and compliance outcomes.
• Strong partnership and coordination with EMCOR Security Operations.
• Accurate maintenance of SSPs, POA&Ms, security documentation, and audit evidence.

#miller

#LI - JG1

Equal Opportunity Employer

As a leading provider of mechanicaland electrical construction, facilities services, and energy infrastructure,we offer employess a competitive salary and benefits package and we are always looking for individuals with the talent and skills required to contribute to our continued growth and sucess. Equal Oppurtunity Employer/Veterans/Disabled.

Affirmative Action Policy

Please review our Affirmative Action Policy.

Notice to Prospective Employees

Notice to prospective employees

There have been fraudulent postings and emails regarding job openings. EMCOR Group and its companies list open positions here. Please check our available positions to confirm that a post or email is genuine. EMCOR Group and its companies do not reach out to individuals to help with marketing or other similar services. If an individual is contacted for services outside of EMCOR’s normal application process – it is probably fraudulent.