Cybersecurity Analyst

Diamondback Energy•Oklahoma City, OK

4d•Onsite

About The Position

The Cybersecurity Analyst II will work under the guidance of Senior IT security/risk personnel and management to provide delivery, support, and management of cyber initiatives at Diamondback. The analyst will make use of, and assist in creating/maintaining, procedures and guidelines related to Diamondback’s security solutions and processes. Activities may include, but are not limited to, security assessments, network analysis, threat detection and remediation, packet analysis, scripting or programming, and incident response.

Requirements

Bachelor’s degree (BBA or BS) in Management Information Systems, Computer Science, or a related field, or a minimum of 4 years of equivalent experience
At least 3+ years of cybersecurity experience
Working knowledge of common cybersecurity frameworks and standards (e.g., NIST, CIS, ISO 27001)
Working knowledge of Security Information and Event Management (SIEM) solutions
Understanding of computer networking concepts, protocols, and network security methodologies
Working knowledge of firewall operations
CompTIA Security+ or another active entry-level cybersecurity certification

Nice To Haves

Experience with intrusion detection, NetFlow and log analysis, and rule/signature development, as well as programming or scripting
Experience implementing Identity and Access Management (IAM) concepts, including Segregation of Duties (SoD), RBAC, least privilege, and access governance
Working knowledge of cybersecurity program components such as policy development, application security, network security, incident response, disaster recovery, operational security, and end-user education
Strong written and verbal communication skills, with the ability to clearly articulate technical issues and solutions to non-technical stakeholders and leadership

Responsibilities

Troubleshoot and resolve escalated cybersecurity support tickets.
Support incident response efforts, including investigation, containment, eradication, and recovery.
Develop and enhance security orchestration and automation playbooks to improve detection and response.
Collaborate with cross-functional teams to design, build, and deploy secure systems and frameworks.
Conduct vulnerability scans, security audits, and testing to ensure compliance and security hygiene.
Track, prioritize, and remediate security vulnerabilities and risks identified through assessments.
Support security assessments and risk evaluations of third-party vendors and internal applications.
Assist in the implementation and administration of Identity and Access Management (IAM) controls.
Promote cybersecurity awareness and analyze security trends to improve overall security posture.
Provide cross-functional support, maintain relationships across teams, and participate in on-call coverage as needed.