Cybersecurity Analyst

The Shepherd Material Science Company is a group of manufacturing companies that develop specialty metal-based chemicals and complex inorganic color pigments. These companies consist of The Shepherd Chemical Company, The Shepherd Color Company, and Glass Coatings & Concepts. Performing meaningful work with trusted, talented colleagues is our formula for success and being a great place to work. Every day, our employees relentlessly pursue Shepherd’s Core Purpose and Core Values.

At The Shepherd Material Science Company, cybersecurity is more than a control—it is a practical partnership with the business. We are seeking a hands-on, curious Cybersecurity Analyst to operate and mature our data loss prevention and application security program across Shepherd Chemical, Shepherd Color, Glass Coatings & Concepts LLC, and Shepherd Mirecourt SAS.

This role is ideal for someone who wants to build and improve a data protection program—not simply inherit one. You will administer Microsoft Purview controls, assess enterprise applications, investigate security events, and help colleagues handle sensitive information confidently and appropriately. You will be a service partner, not a gatekeeper.

Responsibilities:

Data Loss Prevention & Information Protection

• Administer and maintain Microsoft Purview DLP policies across the Shepherd Microsoft 365 environment, aligned with our four-tier classification model: Public, Internal, Confidential, and Highly Confidential.
• Configure and tune sensitivity labels and sub-labels for HR, Financial, Customer, NDA Register, Formulations, ITAR, and Legal information.
• Expand auto-labeling for financial patterns, personally identifiable information, customer pricing, and chemical formulation identifiers.
• Monitor SAP data exported to Excel, Power BI, and SQL Server extracts to confirm correct labeling and storage in approved locations.
• Enforce Microsoft 365 Copilot and Azure AI data boundaries under Shepherd’s AI Acceptable Use Policy, including restrictions for Highly Confidential and Formulations data.
• Continuously optimize controls, rules, and detection logic to reduce false positives while minimizing disruption to legitimate work.
• Produce monthly security operations and data protection metrics that support risk-based decisions and continuous improvement.

Application Security

• Conduct security and risk assessments for new application requests, evaluating data classification, Microsoft Entra ID single sign-on, SOC 2 Type II controls, data residency, and integration risks.
• Support vendor security assessments, including SOC 2 review and exception documentation for Tier 1 vendors.
• Detect and investigate non-approved applications, services, and technologies; assess risk and drive policy-aligned corrective action.
• Review application access and permissions for alignment with least-privilege and core identity and access management controls.
• Close findings from the September 30, 2026 existing-application review and support the annual application portfolio review.
• Help govern data across its lifecycle—from classification and protection through retention and secure destruction.

Incident Support, Awareness & Compliance

• Triage alerts across data protection, identity, email, network, and endpoint security platforms; document findings, remediation actions, and escalations.
• Serve as a first responder for cybersecurity incidents by scoping impact, coordinating containment, documenting response actions, and recommending corrective measures.
• Coordinate with the IS Infrastructure team and Red Canary MDR when incidents extend into endpoint or network threats.
• Create practical data-handling training and job aids that complement CyberAware training.
• Support cybersecurity audits, customer security reviews, third-party risk assessments, evidence collection, and security questionnaires.
• Support GDPR controls for Shepherd Mirecourt SAS, including Microsoft Purview data-residency configurations required by the France/EU Supplement.
• Track security trends, Microsoft Secure Score, Microsoft Purview roadmap changes, and emerging data-exfiltration risks; recommend improvements to the IS Applications and Data Manager.
• Travel to local Shepherd sites as business needs require.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field—or equivalent relevant experience.
• Three or more years of information security experience, including at least one year of hands-on DLP or data protection work.
• Working experience with Microsoft Purview DLP, Information Protection, and sensitivity labels in a Microsoft 365 E3 or E5 environment.
• Familiarity with Microsoft Entra ID, conditional access, and single sign-on concepts.
• Ability to assess security and risk across SaaS platforms, cloud services, endpoints, networks, email systems, and third-party providers using industry-standard reports and frameworks.
• Working knowledge of NIST Cybersecurity Framework 2.0 and ISO/IEC 27001 concepts.
• Clear written and verbal communication skills, with the ability to explain a blocked email or security finding to a nontechnical colleague without jargon.

Preferred Qualifications

• Microsoft SC-401 or SC-200, CompTIA Security+ or CySA+, ISC2 SSCP, CISSP, or a similar certification.
• Experience with the Microsoft Defender suite.
• Exposure to SAP S/4HANA data and authorization concepts, Power BI, or Power Platform governance.
• Understanding of GDPR, ITAR, or trade-secret protection in a manufacturing environment.
• PowerShell or KQL scripting experience for alert analysis, automation, and reporting.

EEO Statement

The Shepherd Material Science Company is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity or expression, age (40 or over), disability, veteran status or other characteristics protected by law.