Cyber Security Analyst

FLOWCO HOLDINGS INC.•Houston, TX

1d•Onsite

About The Position

The Cyber Security Analyst is responsible for protecting the organization's information assets through proactive monitoring, threat detection, incident response, vulnerability management, and operational security activities. The role supports the IT Cyber Security Manager in executing the organization's cybersecurity strategy and maintaining a secure technology environment. The Cyber Security Analyst serves as a trusted advisor by balancing cybersecurity risk with business objectives and helping ensure the organization's security program aligns with industry frameworks including the NIST Cybersecurity Framework (CSF 2.0), CIS Critical Security Controls, and Microsoft Security Best Practices. The Cyber Security Analyst is expected to exercise sound judgment, communicate effectively with technical and non-technical stakeholders, and escalate risks and significant security events to the IT Cyber Security Manager when appropriate.

Requirements

Bachelor's degree or equivalent experience.
3–5 years of cybersecurity or security-focused systems administration experience.
Strong analytical and communication skills.
Working knowledge of Windows Server, Active Directory, networking, and Microsoft 365.

Nice To Haves

Microsoft Defender suite, Entra ID, Purview, Sentinel, Intune
CrowdStrike, Fortinet, Endpoint Central
Azure, PowerShell, Microsoft Graph API
Security+ certification
CySA+ certification
SC-200 certification
SC-300 certification
AZ-500 certification
CISSP (or pursuing)

Responsibilities

Monitor and investigate security events across endpoint, identity, email, cloud, and network security platforms.
Analyze alerts and coordinate response actions.
Assist with incident response, documentation, and threat hunting.
Prioritize vulnerabilities based on business risk.
Coordinate remediation and validate corrective actions.
Assist with penetration testing and remediation tracking.
Monitor Entra ID, endpoint security, Microsoft 365, and privileged access.
Review application permissions and service principals.
Support secure AI adoption.
Monitor for Shadow AI.
Evaluate AI solutions for security and privacy risks.
Administer and tune cybersecurity technologies.
Develop security automation using PowerShell or Microsoft Graph.
Support NIST CSF 2.0, CIS Controls, audits, documentation, and risk assessments.
Support awareness training.
Collaborate across IT and business teams.
Stay current on emerging threats.