Security Analyist

Benefits

• Security‑first mindset – Cybersecurity isn’t just what we do, it’s who we are
• 40+ years in business – Established, stable, and continuously evolving
• Average engineer tenure of 15+ years – Build a career, not just a job
• Collaborative, engaging culture – We work hard and enjoy what we do
• Pet‑friendly office – Because we know your best coworker might have four legs
• Office happy hours & team events – Regular opportunities to connect and unwind
• Weekly company‑sponsored lunches – Because good work deserves good food
• Game room amenities – Pool table, ping pong, and arcade games
• 100% employer‑paid medical coverage (single)
• Paid vacation and holidays
• Paid time off
• Paid training and ongoing professional development
• Paid life insurance
• Flexible Spending Account (FSA)
• Health Savings Account (HSA)
• 401(k) program
• 401(k) / 401(k) matching
• Employee assistance program

Dox Electronics, Inc. is seeking a detail‑oriented and driven Security Analyst to join our Assessment Team. In this role, you will be responsible for evaluating client environments against cybersecurity frameworks such as CMMC and NIST 800-171, and providing clear, actionable recommendations to improve security posture. You will leverage your technical expertise in security frameworks, network infrastructure, and Microsoft environments to assess controls, identify gaps, and support clients through compliance and security initiatives.

This position requires strong analytical skills, effective communication, and the ability to work both independently and collaboratively in a fast‑paced consulting environment.

$60,000 - $70,000 a year

Full-time

Rochester, NY 14607 (In person)

• Review client environments and collect evidence to determine compliance with CMMC, NIST 800-171, and related frameworks
• Evaluate technical, administrative, and physical controls and document findings clearly and accurately
• Present assessment results and recommendations to clients and internal team members
• Communicate effectively with clients, demonstrating professionalism in both written and verbal interactions
• Maintain a high level of organization, attention to detail, and adherence to defined processes
• Proactively identify opportunities to assist team members and support project success
• Collaborate with internal subject matter experts when additional technical or compliance expertise is required
• Exercise sound judgment by escalating questions appropriately and ensuring high‑quality deliverables
• Support continuous improvement efforts within the Assessment Team

• Experience with CMMC and other compliance frameworks (e.g., NIST 800-171, ISO 27001)
• Strong knowledge of network infrastructure and core security principles
• Familiarity with Microsoft Azure, including GCC High environments
• Understanding of IT security frameworks and compliance requirements
• Experience supporting or working with government contracting environments (DFARS/CUI preferred)
• Familiarity with SIEM and EDR platforms
• Strong troubleshooting, analytical, and problem‑solving skills
• Excellent written and verbal communication skills

• Experience with AWS cloud services
• Background supporting government contractors or DFARS‑regulated environments
• Power Shell scripting or automation experience
• Hands‑on experience with firewalls and networking technologies

• A self‑starter who takes initiative and seeks out ways to contribute
• A team player who collaborates effectively and communicates openly
• Someone who is organized, process‑driven, and committed to quality
• A professional who is comfortable engaging with clients and representing Dox