Security Analyst III

ONEOK•Tulsa, OK

4d•Onsite

About The Position

The Security Analyst III serves as a senior technical contributor within the Enterprise Security Tools & Architecture team. This position is responsible for designing, implementing, administering, and improving enterprise cybersecurity technologies that protect the organization's information assets, identities, critical infrastructure, users, and business operations. The Security Analyst III provides technical leadership for enterprise security platforms, identity and access management solutions, cloud security capabilities, threat detection technologies, and cybersecurity engineering initiatives. This role leads complex projects, develops automation and detection capabilities, supports incident response activities, and drives continuous improvement across cybersecurity operations. The Security Analyst III is expected to possess strong expertise across multiple cybersecurity domains and serve as a trusted technical resource for security operations, architecture, engineering, and business stakeholders. Successful candidates will demonstrate a blend of security engineering, operational excellence, technical leadership, and architectural thinking while helping to advance the organization's security posture.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; or equivalent combination of education and experience.
Demonstrated experience administering and supporting enterprise cybersecurity technologies.
Experience supporting security monitoring, incident response, threat detection, and security operations activities.
Experience with scripting, automation, or software development technologies such as PowerShell, Python, or similar languages.
Strong understanding of cybersecurity principles, risk management concepts, and industry best practices.
Experience working within enterprise-scale infrastructure, cloud services, and hybrid environments.
Strong analytical, troubleshooting, documentation, communication, and problem-solving skills.
Knowledge of IT infrastructure environments, local and wide-area networks and application security needs
Ability to manage small to medium information security projects
Ability to develop consensus and facilitate decision-making among senior executives
Ability to communicate and/or exchange information; conduct oral presentations

Nice To Haves

Experience with SIEM, SOAR, security analytics, or detection engineering platforms.
Experience securing enterprise cloud, identity, collaboration, or productivity platforms within a regulated or large-scale enterprise environment.
Experience with identity and access management, authentication technologies, privileged access controls, governance, or related security disciplines.
Experience integrating cloud and enterprise security telemetry into monitoring, detection, and incident response programs.
Experience leading technical projects, platform deployments, or cybersecurity improvement initiatives.
Relevant certifications such as CISSP, CCSP, GIAC, cloud-security, security engineering, or other cybersecurity certifications.
CISSP Certified Information Systems Security Professional preferred
Certified Information Security Manager (CISM) preferred
Certified Information Systems Auditor (CISA) preferred
Certified Secure Software Lifecycle Professional (CSSLP) preferred
Certified Information Privacy Professional (CIPP) preferred

Responsibilities

Design, implement, administer, and maintain enterprise security technologies and supporting infrastructure.
Design, implement, and support security controls protecting enterprise identity, cloud, collaboration, messaging, and productivity platforms.
Evaluate security configurations, identify gaps, and recommend improvements that strengthen authentication, access control, privileged access, data protection, monitoring, and overall security posture across enterprise technology platforms.
Lead technical projects involving cybersecurity tools, integrations, monitoring capabilities, cloud services, identity systems, and operational improvements.
Ensure security platforms remain reliable, scalable, and aligned with business requirements.
Develop and maintain system documentation, technical standards, operational procedures, and architecture diagrams.
Provide advanced troubleshooting and support for cybersecurity systems and services.
Evaluate emerging technologies and security capabilities to improve enterprise security effectiveness and operational maturity.
Develop, tune, and maintain security detections, alerts, dashboards, correlation logic, and investigative workflows.
Integrate security telemetry from multiple sources into enterprise monitoring and response platforms.
Support incident response efforts through investigation, containment, remediation, and post-incident analysis.
Identify opportunities for automation and process improvement that improve security operations efficiency and resiliency.
Participate in threat hunting, detection engineering, purple team activities, and continuous improvement initiatives.
Collaborate with internal stakeholders to improve visibility, detection coverage, response effectiveness, and operational metrics.
Serve as a subject matter expert for assigned security technologies and functional areas.
Mentor junior analysts and provide technical guidance during investigations, projects, and operational activities.
Participate in architecture reviews, technology evaluations, risk assessments, and strategic planning initiatives.
Lead technical projects and influence cybersecurity decisions through sound engineering and architectural recommendations.
Promote best practices related to security engineering, monitoring, automation, platform administration, and operational excellence.
Lead projects with minimal oversight.
Drive meaningful improvements to security capabilities and operational processes.
Demonstrate expertise across multiple cybersecurity domains.
Mentor and develop less experienced team members.
Balance tactical execution with strategic thinking.
Translate business requirements and security objectives into practical, scalable solutions.
Continuously learn and adapt to emerging threats, technologies, and business needs.