Cyber Security Analyst

Type One Energy Group•Madison, WI

1d•Hybrid

About The Position

Type One Energy is seeking a Cyber Security Analyst to join their team. This is a foundational role with a clear trajectory, working alongside the Senior Cybersecurity Engineer to operate and mature the company's information security program. In the first year, the analyst will lead the buildout of automated hardware and software inventory and support the standup of a new SIEM, establishing essential visibility and detection foundations. As these foundations stabilize, the role will evolve into deeper security operations, detection engineering, and incident response. This position is ideal for an early-career security professional who is technically curious, process-disciplined, and motivated to build reliable, automated systems from the ground up.

Requirements

One to three years of experience in IT, security operations, or a closely related technical role; equivalent education plus relevant hands-on experience will be considered.
Working familiarity with core security operations concepts, including SIEM, endpoint detection and response, alerting, and vulnerability management.
Demonstrated scripting and automation ability (e.g., PowerShell, Python), with a bias toward automating repetitive work rather than performing it manually.
Understanding of endpoint and identity management platforms (e.g., Microsoft Entra ID, Intune, or equivalents).
Strong attention to detail and disciplined documentation habits; comfort owning data quality and reconciliation.
Ability to work effectively with managed service providers and external vendors.
Strong analytical, troubleshooting, and problem-solving skills.

Nice To Haves

CompTIA Security+ or an equivalent certification, or active progress toward one, preferred.
Exposure to compliance frameworks such as CIS Controls, NIST CSF, SOC 2, or SOX ITGC, preferred.
Hands-on exposure to SIEM content or detection engineering, and to asset or SaaS discovery tooling, preferred.
Experience in a regulated, manufacturing, or critical-infrastructure environment, preferred.
Familiarity with data classification and DLP concepts such as Microsoft Purview sensitivity labeling, preferred.

Responsibilities

Build and automate hardware and software inventory using existing security and endpoint telemetry, replacing manual reconciliation with reliable, repeatable pipelines.
Support the implementation and tuning of a new SIEM, including data source onboarding, alert triage, and detection use-case development.
Maintain the authoritative system inventory and produce audit-ready evidence of its completeness and accuracy in support of IT general controls (ITGC).
Monitor, triage, and escalate security events in coordination with the managed SOC provider, developing into an internal point of continuity for security operations.
Identify, track, and coordinate remediation of vulnerabilities across the endpoint and identity estate.
Support access management, change management, and asset-completeness evidence in preparation for external audit.
Contribute to incident response readiness, runbook development, and post-incident documentation.
Maintain security documentation and control records in alignment with the information security document suite.
Support oversight of managed service providers and vendors, validating that outsourced controls are performed and evidenced.
Collaborate with IT, engineering, legal, and finance teams where security intersects their work.