Cybersecurity Analyst - AI & Firewalls

Title: Cybersecurity Analyst Company: Global Power Components – www.globalpowercomponents.com Location: Milwaukee, WI (onsite 5-days/week) Hire Type: Direct Hire Position Summary GPC is seeking a hands-on Cybersecurity Analyst whose primary focus is AI and firewall security. You will secure and govern the AI tools the business adopts including Microsoft 365 Copilot, AI agents, and third-party generative AI services while owning the day-to-day administration of our Ubiquiti Uni.

Fi firewall and network security controls across our sites. The focus is securing AI, not building it; however, hands-on experience implementing AI solutions is required so you understand how these tools are deployed and where their risks lie. You will also support security operations, incident response, and governance, working closely with the IT team, engineering, and operations to keep a modern manufacturing environment secure, resilient, and productive.

Essential Duties

& Responsibilities AI Security & Governance (~40%) Review proposed AI tools, agents, and use cases for security, privacy, and data-protection risk; define the security requirements they must meet; and verify those controls are in place before go-live. Help develop and enforce GPC’s AI acceptable-use policy and standards, and maintain an inventory of approved AI tools, agents, and integrations.

Secure Microsoft 365 Copilot and other AI assistants by reviewing data permissions and oversharing and applying sensitivity labels, data loss prevention (DLP), and audit controls (e.g., Microsoft Purview), so AI tools surface only data users are authorized to see, and engineering drawings, designs, and customer information stay protected.

Detect and manage unsanctioned “shadow AI” use through firewall application control and content filtering, cloud app discovery (e.g., Microsoft Defender for Cloud Apps), and endpoint and browser policies. Assess AI agents, plugins, connectors, API integrations (e.g., Microsoft Foundry / Azure OpenAI), and Model Context Protocol (MCP) servers for excessive permissions, credential and secrets exposure, logging gaps, and supply-chain risk, and enforce least privilege for agent identities.

Threat-model and test AI-enabled applications against the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS including prompt injection, sensitive information disclosure, data poisoning, and excessive agency. Evaluate AI vendors’ data handling, retention, use of customer data for model training, and security controls as part of third-party risk reviews.

Monitor AI usage and AI-related security events and investigate misuse or data exposure. Create user guidance and training on safe AI use, including how to recognize AI-generated phishing and deepfake voice or video impersonation. Firewall & Network Security (~35%) Administer, configure, and maintain GPC’s Ubiquiti Uni.

Fi firewall platform, including zone-based firewall policies, application-aware (Layer 7) rules, NAT, intrusion detection and prevention (IDS/IPS), content and URL filtering, SSL/TLS inspection, region and domain blocking, and threat-signature subscriptions (e.g., Uni. Fi Cyber. Secure). Design and enforce least-privilege segmentation between GPC’s separate network environments including corporate, guest, production/shop-floor (OT), and IoT across multiple sites and buildings, using VLANs, firewall zones, and identity-aware policies (e.

g., Microsoft Entra integration). Configure and secure site-to-site connectivity (IPsec VPN, Site Magic SD-WAN) and remote access (e.g., Wire. Guard, Teleport), including hybrid connectivity to Microsoft Azure. Maintain firewall high availability and resilience (e.g., Shadow Mode failover, multi-WAN), firmware and Uni.

Fi OS updates, and configuration backups through Uni. Fi Site Manager. Own firewall change management: evaluate rule and exception requests for business justification, implement approved changes, and keep rule and exception documentation current. Conduct scheduled firewall rule-base reviews to remove unused, shadowed, or overly permissive rules.

Forward firewall, IDS/IPS, and network logs to the SIEM, and investigate anomalous traffic and threat alerts. Manage host-based firewall policies for servers and workstations (e.g., Windows Firewall through Microsoft Intune) to complement network controls. Support network security projects — such as new buildings, gateway deployments and upgrades, and network redesigns including testing, cutover, and documentation.

Security Operations & Incident Response (~15%) Monitor, triage, and investigate security alerts across endpoints, identities, email, and cloud using SIEM/XDR tools (e.g., Microsoft Defender XDR, Microsoft Sentinel), including threat hunting informed by MITRE ATT&CK. Use AI-assisted security tools (e.g., Microsoft Security Copilot) to accelerate investigation and response, validating outputs before acting on them.

Support incident response from detection through containment, recovery, and post-incident review, and help maintain incident response playbooks. Run vulnerability scans, prioritize findings by real-world risk (e.g., CVSS, EPSS, and the CISA Known Exploited Vulnerabilities catalog), and coordinate remediation with the IT team.

Support identity and endpoint security in Microsoft Entra ID, Defender for Endpoint, and Intune, including MFA, Conditional Access, and device hardening. Analyze reported phishing and suspicious emails, and support backup, recovery, and ransomware-resilience testing. Governance, Risk & Awareness (~10%) Maintain security policies, standards, and procedures aligned with the NIST Cybersecurity Framework (CSF) 2.

0 and the CIS Critical Security Controls and align AI risk practices with the NIST AI Risk Management Framework. Support customer security questionnaires, audits, and risk assessments for new systems, vendors, and projects. Deliver security awareness training and phishing simulations. Report security metrics, risks, and recommendations to IT leadership in clear, business-focused language, and mentor IT Support staff on security best practices.

Required Qualifications: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field or an equivalent combination of education and experience. 3+ years of hands-on experience in cybersecurity, network security, or a related role. Hands-on experience implementing AI solutions in a business environment for example, rolling out Microsoft 365 Copilot, building Copilot Studio agents or AI-enabled automations, or integrating generative AI services into applications and workflows through APIs.

1+ year of hands-on experience securing AI technologies for example, applying data-protection and access controls for generative AI tools, governing AI usage, or assessing LLM-based applications for security risks. 2+ years of hands-on experience administering firewalls and network security, ideally on Ubiquiti Uni. Fi gateways; experience with other enterprise platforms (e.

g., Fortinet, Palo Alto Networks, Cisco, or Sophos) also applies. Strong networking fundamentals: TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, and VPN (IPsec, Wire. Guard, SSL). Working knowledge of Microsoft 365 and Azure security, including Entra ID, Intune, Defender, and Purview. Familiarity with security and AI frameworks: NIST CSF 2.

0, NIST AI RMF, CIS Controls, MITRE ATT&CK, OWASP Top 10 for LLM Applications, and MITRE ATLAS. Experience with SIEM, EDR/XDR, and vulnerability management tools. Scripting or query skills in Power. Shell, Python, and/or KQL, including working with REST APIs. At least one recognized security certification (e.g., CompTIA Security+, CompTIA CySA+, or ISC2 SSCP), or the ability to obtain one within six months of hire.

Strong analytical, problem-solving, and documentation skills, with the ability to explain technical risk to non-technical audiences. Ability to handle confidential information with integrity and discretion. Willingness to participate in an on-call rotation and respond to after-hours incidents. Ability to pass a pre-employment background check.

Preferred Qualifications

Experience building AI solutions with Microsoft Copilot Studio, Power Platform, or Microsoft Foundry (formerly Azure AI Foundry), including grounding AI in business data (e.g., retrieval-augmented generation). Experience governing AI agents with Microsoft Agent 365 and Microsoft Entra Agent ID, Microsoft Purview AI data-security capabilities, or Microsoft Security Copilot.

AI certifications such as CompTIA SecAI+, IAPP Artificial Intelligence Governance Professional (AIGP), a GIAC AI security certification, or Microsoft exam AI-103 (Developing AI Apps and Agents on Azure). Hands-on experience with the Uni. Fi Network application, Uni. Fi Site Manager, Cyber. Secure, and Site Magic SD-WAN.

Ubiquiti certifications such as Uni. Fi Routing, Switching & Cybersecurity Admin (URSCA) or Uni. Fi Network Professional, or other networking and firewall certifications (e.g., CompTIA Network+, Cisco CCNA, Fortinet NSE 4 or higher, or Palo Alto Networks Next-Generation Firewall Engineer). Advanced security certifications such as Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500), Microsoft Certified: Security Operations Analyst Associate (SC-200), GIAC GCIH or GCIA, or ISC2 CISSP.

Experience with AI red-teaming tools such as Microsoft PyRIT or NVIDIA garak. Experience securing manufacturing or operational technology (OT) environments, including shop-floor equipment, and familiarity with ISA/IEC 62443. Experience protecting engineering/CAD environments and intellectual property. Familiarity with compliance frameworks common to manufacturers and their customers (e.

g., NIST SP 800-171/CMMC, ISO/IEC 27001) and with AI management standards such as ISO/IEC 42001. Experience designing or deploying segmented, multi-site networks, including firewall deployments and migrations. What Success Looks Like in the First Year Approved AI tools and agents are inventoried, governed by policy, and protected by data-loss and access controls.

New AI tools and integrations receive a security review before approval, with required controls verified before go-live. Firewall policies are documented, reviewed on a regular schedule, and aligned to least privilege across all sites and network environments. Security alerts are triaged within defined service levels, and critical and known-exploited vulnerabilities are remediated within target timeframes.

Employees recognize and report AI-enabled phishing and impersonation attempts.