Analyst II, Information Security

The Position

We're seeking an Information Security Analyst with expertise in Microsoft Intune, or Defender, to design, implement, and maintain secure endpoint baselines, enforce configuration and compliance, and partner with IT operations to reduce risk and improve the security posture.

• Create secure endpoint configuration baselines via Group Policy or Intune based on NIST/CIS (etc.).
• Triage security alerts and elevate as necessary.
• Create, test, and deploy conditional access policies.
• Create, maintain, and troubleshoot firewall security policies.
• Participate in regular audits to ensure compliance with company policies and applicable laws.
• Standardize and enforce Intune compliance policies, device configuration profiles, and remediation scripts.
• Coordinate with IT to minimize user friction while maximizing control (test rings, staged rollouts, rollback plans).
• Monitor endpoint configuration compliance and remediate drift.
• Contribute to Microsoft Entra :
  Conditional Access, MFA, device compliance gates, role-based access, Privileged Identity Management (PIM).
• Use Power Shell and/or Intune remediation scripts to automate tasks and drift checks.
• Maintain documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.

• Bachelor's degree in Information Security/IT/CS or related field, or equivalent practical experience.
• 3+ years in information security, system administration, help desk, or similar roles.
• Exposure to MDM/MAM policies for Windows/macOS/iOS/Android.
• Hands-on experience administering EDR (Microsoft Defender, Crowd Strike Falcon, Sentinel One).
• Experience in a regulated industry environment.
• Strong analytical/problem‑solving skills; investigate alerts and interpret audit logs.
• Excellent written/verbal communication; explain technical concepts to non‑technical stakeholders.

• OT/manufacturing cybersecurity experience;
  Dragos OT security.
• Relevant certifications.
• Pharmaceutical/biotech/life sciences experience.
• Exposure to SIEM, EDR platforms, and identity/access management.
• Intune device configuration/MDM policy experience.
• GxP environment experience.

Wisconsin pay range: $80,000 USD - $100,000 USD.

Candidates must have current, valid authorization to work in the country where this role is located.