Cyber Security Analyst

GPC is seeking a hands-on Cybersecurity Analyst whose primary focus is AI and firewall security. You will secure and govern the AI tools the business adopts including Microsoft 365 Copilot, AI agents, and third-party generative AI services while owning the day-to-day administration of our Ubiquiti Uni Fi firewall and network security controls across our sites. The focus is securing AI, not building it;

however, hands-on experience implementing AI solutions is required so you understand how these tools are deployed and where their risks lie. You will also support security operations, incident response, and governance, working closely with the IT team, engineering, and operations to keep a modern manufacturing environment secure, resilient, and productive.

• Review proposed AI tools, agents, and use cases for security, privacy, and data-protection risk; define the security requirements they must meet; and verify those controls are in place before go-live.
• Help develop and enforce GPC’s AI acceptable-use policy and standards, and maintain an inventory of approved AI tools, agents, and integrations.
• Secure Microsoft 365 Copilot and other AI assistants by reviewing data permissions and oversharing and applying sensitivity labels, data loss prevention (DLP), and audit controls (e.g., Microsoft Purview), so AI tools surface only data users are authorized to see, and engineering drawings, designs, and customer information stay protected.
• Assess AI agents, plugins, connectors, API integrations (e.g., Microsoft Foundry / Azure OpenAI), and Model Context Protocol (MCP) servers for excessive permissions, credential and secrets exposure, logging gaps, and supply-chain risk, and enforce least privilege for agent identities.
• Threat-model and test AI-enabled applications against the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS including prompt injection, sensitive information disclosure, data poisoning, and excessive agency.
• Evaluate AI vendors’ data handling, retention, use of customer data for model training, and security controls as part of third-party risk reviews.
• Monitor AI usage and AI-related security events and investigate misuse or data exposure.
• Create user guidance and training on safe AI use, including how to recognize AI-generated phishing and deepfake voice or video impersonation.

• Administer, configure, and maintain GPC’s Ubiquiti Uni Fi firewall platform, including zone-based firewall policies, application-aware (Layer
  7) rules, NAT, intrusion detection and prevention (IDS/IPS), content and URL filtering, SSL/TLS inspection, region and domain blocking, and threat-signature subscriptions (e.g., Uni Fi Cyber Secure).
• Design and enforce least-privilege segmentation between GPC’s separate network environments including corporate, guest, production/shop-floor (OT), and IoT across multiple sites and buildings, using VLANs, firewall zones, and identity-aware policies (e.g., Microsoft Entra integration).
• Configure and secure site-to-site connectivity (IPsec VPN, Site Magic SD-WAN) and remote access (e.g., Wire Guard, Teleport), including hybrid connectivity to Microsoft Azure.
• Maintain firewall high availability and resilience (e.g., Shadow Mode failover, multi-WAN), firmware and Uni Fi OS updates, and configuration backups through Uni Fi Site Manager.
• Own firewall change management: evaluate rule and exception requests for business justification, implement approved changes, and keep rule and exception documentation current.
• Conduct scheduled firewall rule-base reviews to remove unused, shadowed, or overly permissive rules.
• Forward firewall, IDS/IPS, and network logs to the…