How to apply for IT Security Analyst

About Re:Build Manufacturing

Re:Build Manufacturing stands out by combining advanced technology with a mission to revitalize U.S. manufacturing for a sustainable future. This remote role offers the chance to protect critical infrastructure while working with cutting-edge Microsoft security tools. If you value purpose-driven work and technical challenge, this is an ideal fit.

About the role

As an IT Security Analyst, you will be the frontline defender monitoring and responding to threats across Microsoft Defender, Purview, and Sentinel. Your work directly safeguards sensitive data and ensures compliance with CMMC standards, making a tangible impact on national security and manufacturing innovation.

A typical day

Your day starts by reviewing Sentinel alerts and dashboards, triaging any overnight incidents. You'll then tune Defender policies, investigate a potential data exfiltration via Purview, and collaborate with IT on vulnerability remediation. Afternoon meetings might include a CMMC compliance review and a quick knowledge-sharing session with the team.

Who Re:Build Manufacturing is looking for

• Has 3-5 years of hands-on experience configuring and managing Microsoft Defender, Purview, and Sentinel, not just theoretical knowledge.
• Holds relevant certifications like Microsoft SC-100/200/300/400 or CompTIA Security+ and is comfortable with CMMC compliance requirements.
• Thrives in a remote environment with strong self-discipline and communication skills, able to lead incident response independently.
• Possesses a bachelor's degree in cybersecurity, IT, or equivalent experience, with a track record of defending against malware and endpoint compromises.

Tips for this application

• Tailor your resume to highlight specific Microsoft security tools (Defender, Purview, Sentinel) with quantifiable achievements, e.g., 'Reduced incident response time by 30% using Sentinel playbooks.'
• In your cover letter, explicitly mention your experience with CMMC or similar frameworks (NIST 800-171) and how you've enforced compliance policies.
• Include a link to a portfolio or GitHub showing any custom detection rules, automation scripts, or Sentinel workbooks you've developed.
• Research Re:Build's specific manufacturing focus and mention how your skills protect intellectual property and operational technology.
• Apply directly on their careers page and follow up with a concise email to the hiring manager referencing the job ID.

What to cover in your cover letter

['Emphasize your hands-on expertise with Microsoft Defender, Purview, and Sentinel, providing specific examples of incident response and policy optimization.', "Highlight your understanding of CMMC and how you've helped organizations achieve compliance through security monitoring and data protection.", "Show alignment with Re:Build's mission to revitalize U.S. manufacturing, stressing your commitment to securing critical infrastructure.", 'Demonstrate your ability to work autonomously in a remote setting, with examples of leading incident response from detection to resolution.']

Research before applying

• Read Re:Build's 'Our Story' page to understand their unique approach of combining startups and established manufacturers.
• Review their recent news or blog posts about sustainability and technology to reference in your interview.
• Familiarize yourself with the CMMC 2.0 framework and how it applies to defense contractors, as this role likely supports that compliance.
• Look into any public case studies or white papers Re:Build has published on cybersecurity or digital transformation.

Likely interview topics

Based on the job description, expect questions about:

• Walk me through a time you detected and responded to a sophisticated malware attack using Microsoft Defender for Endpoint.
• How would you configure Microsoft Purview Data Loss Prevention policies to protect sensitive engineering data at a manufacturing company?
• Describe your experience with CMMC compliance—what specific controls have you implemented related to access control or incident response?
• How do you prioritize and remediate vulnerabilities across a large environment, and what role does Microsoft Sentinel play in that process?
• Given Re:Build's remote culture, how do you ensure effective communication and collaboration during a security incident?

Common mistakes to avoid

• Don't submit a generic resume lacking specific Microsoft security tool experience—this role requires deep hands-on knowledge.
• Avoid downplaying the importance of CMMC; even if you haven't worked with it directly, show willingness to learn and related experience.
• Don't neglect to mention remote work experience; failing to address self-management and communication could be a red flag for a fully remote role.