Cyber Security Analyst

Warren Administration Company•Oklahoma City, OK

21h

About The Position

The Cyber Security Analyst protects the organization’s information systems, networks, applications, and data from cyber threats. The position monitors security systems, investigates alerts, coordinates incident response, manages vulnerability remediation, supports identity and access controls, and works with IT teams to improve the organization’s security posture. It also serves as a technical resource for secure network architecture, security awareness, risk assessments, and leadership reporting. The role participates in an on-call rotation for high-severity cybersecurity incidents and critical security-system outages, and requires travel up to 30%. This is considered a safety-sensitive position.

Requirements

Bachelor’s degree in cybersecurity, computer science, information systems, or a related field; or four years of related experience and/or training; or an equivalent combination of education and experience.
Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, and governmental regulations.
Ability to present information effectively and respond to questions from managers, clients, customers, and the general public.
Ability to solve practical problems and deal with concrete variables in situations with limited standardization.
Ability to interpret instructions in written, oral, diagram, or schedule form.
Ability to write routine reports and correspondence.
Some knowledge of Cisco networking equipment, IP telephony, and routing protocols.
Ability to travel up to 30%.

Nice To Haves

CCNA certification.
CISSP certification.
CISM certification.
GIAC GCIH certification.
GIAC GCIA certification.
CEH certification.

Responsibilities

Perform diagnostic tests and analyze data to identify threats to computer systems.
Develop security measures to safeguard systems and recommend software and hardware to strengthen information storage and security.
Stay current on threat actors, vulnerabilities, attack techniques, ransomware, phishing, malware, and emerging threats.
Help develop and implement best practices to reduce the risk of data theft.
Install and maintain endpoint detection and response, endpoint protection, and security configuration management.
Respond to cybersecurity incidents involving systems, identities, applications, networks, or data, supporting containment, eradication, and recovery.
Write reports on diagnostic findings and cyberattack events, including detailed after-action reports.
Validate that critical security systems are appropriately backed up and recoverable.
Provide advanced security-related technical support during investigations and incidents.
Participate in an on-call rotation for high-severity cybersecurity incidents and critical security-system outages.
Maintain accurate inventories of cybersecurity and physical-security systems.
Oversee SIEM alert tuning, investigation, triage, and escalation in coordination with SOC providers.
Coordinate incident response during security events, including investigation, documentation, and follow-up.
Develop and deliver security awareness and training initiatives.
Maintain operational security metrics and prepare leadership reports.
Partner with IT and system owners to manage IAM controls, access reviews, and privileged access governance.
Serve as a subject matter expert for secure network architecture, including firewalls, VPNs, SD-WAN, wireless, and authentication systems.
Lead firewall and network security reviews to ensure alignment with internal policies.
Own the end-to-end vulnerability management lifecycle across infrastructure and applications.
Coordinate remediation with IT Networking, IT Server, IT Development, and Operations teams.
Conduct targeted risk assessments and support enterprise risk management activities.
Lead and oversee email security, including anti-phishing, anti-malware, spam protection, email authentication, threat investigation, and security controls against email-based threats.