. Title: Cybersecurity Analyst Company: Global Power Components – www.globalpowercomponents.com Location: Milwaukee, WI (onsite 5-days/week) Hire Type: Direct Hire Position Summary GPC is seeking a hands-on Cybersecurity Analyst whose primary focus is AI and firewall security. You will secure and govern the AI tools the business adopts including Microsoft 365 Copilot, AI agents, and third-party generative AI services while owning the day-to-day administration of our Ubiquiti UniFi firewall and network security controls across our sites. The focus is securing AI, not building it; however, hands-on experience implementing AI solutions is required so you understand how these tools are deployed and where their risks lie. You will also support security operations, incident response, and governance, working closely with the IT team, engineering, and operations to keep a modern manufacturing environment secure, resilient, and productive. Essential Duties & Responsibilities AI Security & Governance (~40%) Review proposed AI tools, agents, and use cases for security, privacy, and data-protection risk; define the security requirements they must meet; and verify those controls are in place before go-live. Help develop and enforce GPC’s AI acceptable-use policy and standards, and maintain an inventory of approved AI tools, agents, and integrations. Secure Microsoft 365 Copilot and other AI assistants by reviewing data permissions and oversharing and applying sensitivity labels, data loss prevention (DLP), and audit controls (e.g., Microsoft Purview), so AI tools surface only data users are authorized to see, and engineering drawings, designs, and customer information stay protected. Detect and manage unsanctioned “shadow AI” use through firewall application control and content filtering, cloud app discovery (e.g., Microsoft Defender for Cloud Apps), and endpoint and browser policies. Assess AI agents, plugins, connectors, API integrations (e.g., Microsoft Foundry / Azure OpenAI), and Model Context Protocol (MCP) servers for excessive permissions, credential and secrets exposure, logging gaps, and supply-chain risk, and enforce least privilege for agent identities. Threat-model and test AI-enabled applications against the OWASP Top 10 for LLM Applications, the OWASP Top 10 for Agentic Applications, and MITRE ATLAS including prompt injection, sensitive information disclosure, data poisoning, and excessive agency. Evaluate AI vendors’ data handling, retention, use of customer data for model training, and security controls as part of third-party risk reviews. Monitor AI usage and AI-related security events and investigate misuse or data exposure. Create user guidance and training on safe AI use, including how to recognize AI-generated phishing and deepfake voice or video impersonation. Firewall & Network Security (~35%) Administer, configure, and maintain GPC’s Ubiquiti UniFi firewall platform, including zone-based firewall policies, application-aware (Layer 7) rules, NAT, intrusion detection and prevention (IDS/IPS), content and URL filtering, SSL/TLS inspection, region and domain blocking, and threat-signature subscriptions (e.g., UniFi CyberSecure). Design and enforce least-privilege segmentation between GPC’s separate network environments including corporate, guest, production/shop-floor (OT), and IoT across multiple sites and buildings, using VLANs, firewall zones, and identity-aware policies (e.g., Microsoft Entra integration). Configure and secure site-to-site connectivity (IPsec VPN, Site Magic SD-WAN) and remote access (e.g., WireGuard, Teleport), including hybrid connectivity to Microsoft Azure. Maintain firewall high availability and resilience (e.g., Shadow Mode failover, multi-WAN), firmware and UniFi OS updates, and configuration backups through UniFi Site Manager. Own firewall change management: evaluate rule and exception requests for business justification, implement approved changes, and keep rule and exception documentation current. Conduct scheduled firewall rule-base reviews to remove unused, shadowed, or overly permissive rules. Forward firewall, IDS/IPS, and network logs to the SIEM, and investigate anomalous traffic and threat alerts. Manage host-based firewall policies for servers and workstations (e.g., Windows Firewall through Microsoft Intune) to complement network controls. Support network security projects — such as new buildings, gateway deployments and upgrades, and network redesigns including testing, cutover, and documentation. Security Operations & Incident Response (~15%) Monitor, triage, and investigate security alerts across endpoints, identities, email, and cloud using SIEM/XDR tools (e.g., Microsoft Defender XDR, Microsoft Sentinel), including threat hunting informed by MITRE ATT&CK. Use AI-assisted security tools (e.g., Microsoft Security Copilot) to accelerate investigation and response, validating outputs before acting on them. Support incident response from detection through containment, recovery, and post-incident review, and help maintain incident response playbooks. Run vulnerability scans, prioritize findings by real-world risk (e.g., CVSS, EPSS, and the CISA Known Exploited Vulnerabilities catalog), and coordinate remediation with the IT team. Support identity and endpoint security in Microsoft Entra ID, Defender for Endpoint, and Intune, including MFA, Conditional Access, and device hardening. Analyze reported phishing and suspicious emails, and support backup, recovery, and ransomware-resilience testing. Governance, Risk & Awareness (~10%) Maintain security policies, standards, and procedures aligned with the NIST Cybersecurity Framework (CSF) 2.0 and the CIS Critical Security Controls and align AI risk practices with the NIST AI Risk Management Framework. Support customer security questionnaires, audits, and risk assessments for new systems, vendors, and projects. Deliver security awareness training and phishing simulations. Report security metrics, risks, and recommendations to IT leadership in clear, business-focused language, and mentor IT Support staff on security best practices. Required Qualifications: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field or an equivalent combination of education and experience. 3+ years of hands-on experience in cybersecurity, network security, or a related role. Hands-on experience implementing AI solutions in a business environment for example, rolling out Microsoft 365 Copilot, building Copilot Studio agents or AI-enabled automations, or integrating generative AI services into applications and workflows through APIs. 1+ year of hands-on experience securing AI technologies for example, applying data-protection and access controls for generative AI tools, governing AI usage, or assessing LLM-based applications for security risks. 2+ years of hands-on experience administering firewalls and network security, ideally on Ubiquiti UniFi gateways; experience with other enterprise platforms (e.g., Fortinet, Palo Alto Networks, Cisco, or Sophos) also applies. Strong networking fundamentals: TCP/IP, routing and switching, VLANs, DNS, DHCP, NAT, and VPN (IPsec, WireGuard, SSL). Working knowledge of Microsoft 365 and Azure security, including Entra ID, Intune, Defender, and Purview. Familiarity with security and AI frameworks: NIST CSF 2.0, NIST AI RMF, CIS Controls, MITRE ATT&CK, OWASP Top 10 for LLM Applications, and MITRE ATLAS. Experience with SIEM, EDR/XDR, and vulnerability management tools. Scripting or query skills in PowerShell, Python, and/or KQL, including working with REST APIs. At least one recognized security certification (e.g., CompTIA Security+, CompTIA CySA+, or ISC2 SSCP), or the ability to obtain one within six months of hire. Strong analytical, problem-solving, and documentation skills, with the ability to explain technical risk to non-technical audiences. Ability to handle confidential information with integrity and discretion. Willingness to participate in an on-call rotation and respond to after-hours incidents. Ability to pass a pre-employment background check. Preferred Qualifications: Experience building AI solutions with Microsoft Copilot Studio, Power Platform, or Microsoft Foundry (formerly Azure AI Foundry), including grounding AI in business data (e.g., retrieval-augmented generation). Experience governing AI agents with Microsoft Agent 365 and Microsoft Entra Agent ID, Microsoft Purview AI data-security capabilities, or Microsoft Security Copilot. AI certifications such as CompTIA SecAI+, IAPP Artificial Intelligence Governance Professional (AIGP), a GIAC AI security certification, or Microsoft exam AI-103 (Developing AI Apps and Agents on Azure). Hands-on experience with the UniFi Network application, UniFi Site Manager, CyberSecure, and Site Magic SD-WAN. Ubiquiti certifications such as UniFi Routing, Switching & Cybersecurity Admin (URSCA) or UniFi Network Professional, or other networking and firewall certifications (e.g., CompTIA Network+, Cisco CCNA, Fortinet NSE 4 or higher, or Palo Alto Networks Next-Generation Firewall Engineer). Advanced security certifications such as Microsoft Certified: Cloud and AI Security Engineer Associate (SC-500), Microsoft Certified: Security Operations Analyst Associate (SC-200), GIAC GCIH or GCIA, or ISC2 CISSP. Experience with AI red-teaming tools such as Microsoft PyRIT or NVIDIA garak. Experience securing manufacturing or operational technology (OT) environments, including shop-floor equipment, and familiarity with ISA/IEC 62443. Experience protecting engineering/CAD environments and intellectual property. Familiarity with compliance frameworks common to manufacturers and their customers (e.g., NIST SP 800-171/CMMC, ISO/IEC 27001) and with AI management standards such as ISO/IEC 42001. Experience designing or deploying segmented, multi-site networks, including firewall deployments and migrations. What Success Looks Like in the First Year Approved AI tools and agents are inventoried, governed by policy, and protected by data-loss and access controls. New AI tools and integrations receive a security review before approval, with required controls verified before go-live. Firewall policies are documented, reviewed on a regular schedule, and aligned to least privilege across all sites and network environments. Security alerts are triaged within defined service levels, and critical and known-exploited vulnerabilities are remediated within target timeframes. Employees recognize and report AI-enabled phishing and impersonation attempts. At Global Power Components, our mission is simple: Inov8OrDie Driven by this mindset, GPC has grown from 200 to more than 2,000 employees in just five years, expanding from one manufacturing facility to four locations across the Milwaukee area, including our new 500,000-square-foot manufacturing facility in West Milwaukee. We design and manufacture the critical infrastructure that surrounds and supports power generation. But what sets GPC apart isn't just what we build — it's how we work. We move fast. We make decisions. We solve problems. We challenge ourselves to continuously improve, raise the bar and deliver quality work on time. We look for ways to remove unnecessary complexity and make work easier for our customers, our partners and each other. And through it all, we protect our people, our workplaces and the reputation we've built. GPC isn't a traditional corporate environment — and we don't want to be. We expect people to take ownership, speak up, make decisions and get things done. As GPC continues to grow, our people have opportunities to take on significant responsibility, solve bigger problems and make a visible impact on the business. If you're energized by growth, comfortable with change, willing to roll up your sleeves and want to help build what's next in power generation, GPC is a place where you can make an impact.

more at globalpowercomponents.

23 Sep, 2026

globalpowercomponents

Academy Trainee - Electrical

Temporary
Intern
On-site

Burnham, United States of America

On-site

more at globalpowercomponents.

Academy Trainee - Electrical

Academy Trainee - Welding

Maintenance Technician

similar roles.

Business Intelligence Student

AI Solutions Analyst

Experienced AI adoption Lead

Data Engineer

Enterprise Data Engineer

Data Engineer

more at globalpowercomponents.

Academy Trainee - Electrical

Academy Trainee - Welding

Maintenance Technician

similar roles.

Business Intelligence Student

AI Solutions Analyst

Experienced AI adoption Lead

Data Engineer

Enterprise Data Engineer

Data Engineer