Cyber Security Analyst

Warren Equipment Company•Oklahoma City, OK

About The Position

The Cyber Security Analyst protects the organization’s information systems, networks, applications, and data from cyber threats. The role monitors security systems, investigates alerts, coordinates incident response, manages vulnerability remediation, supports identity and access controls, and works with IT teams to strengthen the organization’s security posture. The analyst also serves as a technical resource for secure network architecture, security awareness, risk assessments, and leadership reporting. The position includes an on-call rotation for high-severity cybersecurity incidents and critical security-system outages, and requires travel of up to 30%. It is designated as safety sensitive. The work environment is usually quiet, and the employee may occasionally be exposed to high or precarious places and electrical-shock risks. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

Requirements

Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or four years of related experience and/or training, or an equivalent combination of education and experience.
Ability to read, analyze, and interpret business periodicals, professional journals, technical procedures, and governmental regulations.
Ability to present information effectively and respond to questions from groups of managers, clients, customers, and the general public.
Ability to solve practical problems and handle situations with varied concrete factors and limited standardization.
Ability to interpret written, oral, diagram, or schedule instructions.
Ability to write routine reports and correspondence.
Some knowledge of Cisco networking equipment, IP telephony, and routing protocols.

Nice To Haves

Preferred certifications: CCNA, CISSP, CISM, GIAC GCIH, GIAC GCIA, or CEH.

Responsibilities

Perform diagnostic tests and analyze data to identify threats to computer systems.
Develop security measures to safeguard systems and recommend software and hardware that strengthen information storage and security.
Stay current on threat actors, vulnerabilities, attack techniques, ransomware, phishing, malware, and emerging threats.
Help develop and implement practices that reduce the risk of data theft.
Install and maintain endpoint detection and response, endpoint protection, and security configuration management.
Respond to cybersecurity incidents involving systems, identities, applications, networks, or data to contain, eradicate, and recover from incidents.
Write reports describing diagnostic findings and cyber-attack events, and provide detailed after-action reports.
Validate that critical security systems are backed up and recoverable.
Provide advanced security-related technical support during investigations and incidents.
Participate in an on-call rotation for high-severity cybersecurity incidents and critical security-system outages.
Maintain accurate inventories of cybersecurity and physical-security systems.
Oversee SIEM alert tuning, investigation, triage, and escalation in coordination with SOC providers.
Coordinate incident response during security events, including investigation, documentation, and follow-up.
Develop and deliver security awareness and training initiatives.
Maintain operational security metrics and prepare reports for leadership.
Partner with IT and system owners to manage IAM controls, access reviews, and privileged access governance.
Serve as a subject matter expert for secure network architecture, including firewalls, VPNs, SD-WAN, wireless, and authentication systems.
Lead firewall and network security reviews to ensure alignment with internal policies.
Own the end-to-end vulnerability management lifecycle across infrastructure and applications.
Coordinate remediation with IT Networking, IT Server, IT Development, and Operations teams.
Conduct targeted risk assessments and support enterprise risk management activities.
Lead and oversee email security, including anti-phishing, anti-malware, spam protection, email authentication, threat investigation, and security-control implementation.
Travel up to 30%.