Cybersecurity Analyst

Deriva Energy•Charlotte, NC

1d•Hybrid

About The Position

Deriva Energy is seeking a Cybersecurity Analyst to support and enhance our organization’s security posture across IT and operational environments. This role is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats, as well as contributing to compliance initiatives and continuous improvement of security controls. The ideal candidate is analytical, detail-oriented, and comfortable operating in a regulated environment. This is an in-person position located at our Deriva Energy Headquarters in Charlotte, NC.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or related field
Two (2) years or more of experience in a cybersecurity, IT security role, or related role
In lieu of a bachelor’s degree, HS/GED AND six (6) years or more of relevant experience in a cybersecurity, IT security role, or related role
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Nice To Haves

Experience with security tools such as SIEM, endpoint protection, vulnerability scanners, and email security platforms
Strong understanding of networking concepts, operating systems, and common attack vectors
Familiarity with incident response processes and frameworks
Ability to analyze and interpret logs and security data
Experience in a regulated industry (e.g., energy, utilities, finance)
Familiarity with cybersecurity frameworks (e.g., NIST CSF, CIS Controls)
Knowledge of compliance standards such as NERC CIP
Relevant certifications (e.g., Security+, CySA+, GCIH, CISSP – Associate level acceptable)
Experience with Microsoft 365 security and Defender tools
Strong analytical and problem-solving skills
Attention to detail and ability to prioritize effectively
Clear written and verbal communication skills
Ability to work independently and as part of a team
High level of integrity and accountability
Strong skills with MS Defender, Sentinel, KnowBe4, Tenable, BitDefender

Responsibilities

Monitor security tools (SIEM, EDR, email security, etc.) for suspicious activity and investigate alerts
Perform incident triage, analysis, and response, including containment and remediation actions
Support vulnerability management processes, including scanning, prioritization, and remediation tracking
Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures
Participate in regulatory compliance efforts (NERC, NIST, evidence collection, control validation)
Analyze phishing attempts and support security awareness initiatives
Conduct log analysis across various systems to identify anomalies and potential threats
Collaborate with IT and business units to address security risks and implement safeguards
Maintain documentation related to incidents, processes, and security controls
Contribute to continuous improvement of detection and response capabilities