What are the responsibilities and job description for the Security Analyst 1 position at Construction Partners Inc.?
Who You Are
An entry-level security professional who is eager to learn, takes direction well, and executes clearly defined tasks with precision and care. You may not have all the answers yet, but you document everything, follow through without being asked twice, and understand that in security, attention to detail is not optional. You work under the guidance of the Security Analyst 2 and Senior Security Analyst, supporting day-to-day security operations across a fast-paced, multi-site environment.
Who We Are
Construction Partners, Inc. is one of the fastest-growing civil infrastructure companies in the United States, specializing in the construction and maintenance of roadways across five southeastern states. CPI has a proven track record of successfully buying and integrating companies and is considered a \"buyer of choice\" among owners seeking to sell. Our senior management team has successfully acquired and integrated approximately 60 companies over the course of their decades-long careers. As we grow, protecting our people, systems, and data is not an afterthought — it is a foundation.
Job Duties- Monitor and triage alerts from the enterprise endpoint detection and response (EDR) platform; document findings and escalate detections to Security Analyst 2 or Senior Security Analyst as appropriate.
- Assist with CIS Level 1 hardening tasks on endpoints and servers as directed; document configuration changes and track completion status.
- Assist with host-based firewall policy reviews and compliance checks under the direction of senior analysts; document findings and flag discrepancies.
- Assist with vulnerability management operations: pull scan results, track remediation status in coordination with system owners, and maintain up-to-date records of open findings.
- Assist with identity and access management tasks including user account reviews, MFA enrollment support, and access cleanup under direction.
- Assist with Active Directory and Group Policy hygiene tasks: support periodic AD audits and help remediate stale accounts and group memberships as directed.
- Participate in periodic access reviews; document findings and assist with remediating excess permissions under guidance.
- Monitor the enterprise email security platform quarantine; review reported phishing submissions, escalate confirmed threats, and assist with policy tuning under direction.
- Assist with security awareness training administration: assign training modules, track completion, and help prepare metrics reports.
- Assist with phishing simulation campaigns as directed; help document results and participant follow-up.
- Assist with triage and documentation of security incidents and findings surfaced by the MDR/SOC provider; maintain detailed records and escalate promptly.
- Support penetration test remediation tracking: help document findings, coordinate with teams on status updates, and maintain closure records.
- Assist with physical security camera deployments at acquisition and branch sites: coordinate scheduling with vendors and installers, track project status, and assist with transition to operations.
- Maintain accurate documentation for security tools, configurations, and processes; contribute to runbooks and standard operating procedures as directed.
- Assist with security policy documentation aligned to CIS Controls and CMMC preparation.
- Collaborate with other IT teams on day-to-day security tasks as directed.
- Willingness to travel to branch and acquisition sites when necessary (multi-state).
Minimum Requirements
- 2 year of experience in an IT or information security role.
- Familiarity with Windows endpoint administration and security concepts.
- Familiarity with Active Directory fundamentals and user account management.
- Understanding of core security concepts: least privilege, patch management, phishing, and incident response basics.
- Strong documentation habits and written communication skills.
- Ability to follow detailed procedures and runbooks precisely and consistently.
- Eagerness to learn, take direction, and grow within a structured security program.
Preferred Experience
- Security certifications: CompTIA Security , CompTIA A , Microsoft SC-900, or equivalent.
- Exposure to an enterprise EDR, SIEM, or vulnerability management platform in any capacity.
- Familiarity with Microsoft 365 administration and Azure AD basics.
- Exposure to CIS Benchmarks or security hardening concepts.
- Experience in a multi-site or distributed IT environment.
- Associate's or Bachelor's degree in Cybersecurity, IT, Computer Science, or related field (or equivalent experience).
At Construction Partners, we don’t just build roads – we build leaders. We provide opportunities for our employees to grow and develop meaningful careers at all levels. In addition, we offer a wide variety of benefits to support our employees’ well-being, including:
- Medical, Dental, and Vision coverage
- 401(k) Retirement Plan with employer matching
- Paid vacation and holidays
- Employee Stock Purchase Plan (Construction Partners, Inc.: ROAD)
- Employee Assistance Program
- Professional Development Opportunities
Construction Partners, Inc. is dedicated to the achievement of equality of opportunity for all its employees and applicants for employment without regard to race, color, religion, sex, marital status, age, national origin, disability, veteran status or any other protected group status under federal, state or local law. Construction Partners, Inc. is an E-Verify Participant.
CPI complies with federal and state disability laws and makes reasonable accommodation for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, please let us know.