The PositionWe're seeking an Information Security Analyst with a strong foundation in Help Desk or System Administration and expertise in Microsoft Intune, or Defender. You'll design, implement, and maintain secure endpoint baselines, enforce configuration and compliance, and collaborate closely with IT operations to reduce risk and improve our security posture. This role is ideal for someone who has worked extensively with Windows and Microsoft 365 administration, enjoys solving complex configuration problems, and wants to grow their impact on information security.
Responsibilities
- Create secure endpoint configuration baselines via Group Policy or Intune based on published security frameworks (NIST, CIS, etc.)
- Triage security alerts and escalate as necessary.
- Create, test, and deploy conditional access policies.
- Create, maintain, and troubleshoot firewall security policies.
- Participate in regular audits to ensure security practices are compliant with company policies and applicable laws.
- Standardize and enforce Intune compliance policies, device configuration profiles, and remediation scripts.
- Coordinate with IT to minimize user friction while maximizing control (test rings, staged rollouts, rollback plans).
- Monitor endpoint configuration compliance and remediate drift.
- Contribute to Microsoft Entra ID hardening: Conditional Access, MFA configuration, device compliance gates, role-based access, Privileged Identity Management (PIM).
- Use PowerShell and/or Intune remediation scripts to automate repetitive tasks, reporting, and configuration drift checks.
- Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.
Requirements- Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience
- 3+ years of experience in Information Security, System Administration, Help Desk, or similar roles
- Exposure to MDM/MAM policies for Windows/macOS/iOS/Android
- Demonstrated hands-on experience administering EDR (Microsoft Defender, Crowdstrike Falcon, Sentinel One)
- Experience working within or supporting a regulated industry environment
- Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise
- Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders
Preferred- Cybersecurity experience in an OT or manufacturing environment
- Experience with Dragos OT security
- Certifications relevant to security and compliance
- Prior experience in the pharmaceutical, biotech, or life sciences sector
- Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems
- Exposure to Intune device configurations and MDM Policies
- Experience in GxP environments
Wisconsin pay range
$85,000-$100,000 USD
Arrowhead provides competitive salaries and an excellent benefit package.
Candidates must have current, valid authorization to work in the country where this role is located.
California Applicant Privacy Policy
