Analyst, Security

Southern Star Central Gas Pipeline, Inc.•Owensboro, KY

12d

About The Position

The security analyst monitors, detects, investigates, and responds to cybersecurity threats across the organization’s enterprise IT and operational technology (OT) environments, and maintains and operates the organization’s physical access control systems. This is a converged role: the analyst works fluently across corporate networks, cloud and identity platforms, and industrial control systems, applying a defense-in-depth approach that respects the distinct risk tolerances, availability requirements, and safety considerations of each domain. The analyst will work closely with other teams to ensure security is designed and implemented into new and existing projects.

Requirements

Bachelor’s degree or equivalent experience
Entry-level experience in security or related area (Will also consider candidates with more experience).
Knowledge in IT network security
Knowledge of network forensics, data loss prevention, packet analysis, vulnerability management, and security operations
Familiarity with the MITRE ATT&CK framework and the cyber kill chain
Understanding of TCP/IP networking, segmentation, firewalls, and common attack techniques
Strong problem-solving skills
Strong communication skills
Ability to collaborate with other technical groups to find solutions
A desire to expand current knowledge and skills
Well organized, willing to take initiative, and work independently

Nice To Haves

Advanced degree
Exposure to OT/ICS environments, or a demonstrated willingness to develop OT competency
Scripting or automation familiarity (e.g., PowerShell, Python) for SOAR or remediation workflows
Linux competency

Responsibilities

Performing installation and maintenance of security infrastructure hardware and software
Monitoring security alerts and telemetry across SIEM, EDR/XDR, and OT monitoring platforms, and proactively reviewing internal and external-facing environments for signs of anomalous or malicious activity; triaging, investigating, and escalating per the incident response plan
Conducting threat hunting using the MITRE ATT&CK framework and MITRE ATT&CK for ICS as detection and investigation frameworks
Performing vulnerability management activities, including scanning, prioritization, remediation tracking, and risk acceptance documentation, across both IT and OT asset inventories
Maintaining and tuning access control rules, correlation logic, and alerting to reduce false positives and improve mean-time-to-detect and mean-time-to-respond
Facilitating process improvements for more effective threat detection and response
Maintaining knowledge of modern network security tools, technologies, and threat landscape
Working closely with other teams to ensure network security is designed and implemented into new projects
Supporting incident response across the full NIST lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post-incident review
Investigating alerts within cloud and identity platforms, such as Microsoft 365, Entra ID, XDR platforms, conditional access, and privileged access events
Analyzing email security verdicts, conducting phishing and business email compromise investigations, and managing quarantine and remediation workflows
Authoring and refining detection queries (e.g., KQL, SPL) and dashboards
Supporting endpoint, network, and firewall security operations and policy review
Regularly research and monitor security-related information sources to aid in the identification of threats
Contributing to security awareness initiatives, phishing simulation analysis, and reporting metrics for leadership
Develops knowledge of business processes, network protocols, and system architecture
Researching and testing updates to existing technology; suggest new technologies
Maintaining relationships with customers
Participating on IT related projects as well as cross-functional teams
Receiving general instructions and ability to work independently
Continuous self-improvement and willingness to learn