Cyber Analyst (OnSite)

Lewis Energy Group - San Antonio, TX

Full-time

San Antonio, TX

Support Activities for Mining

About the position

The Cyber Security Analyst at Lewis Energy Group is primarily responsible for safeguarding the company's network and systems against cyber threats. This role involves developing and implementing a comprehensive cyber security strategy, monitoring for potential threats, conducting penetration tests, and educating staff on security protocols. The analyst will also collaborate with third-party security organizations to enhance the company's cyber threat preparedness and ensure compliance with best practices.

Responsibilities

• Develops and implements the cyber security strategy for Lewis Energy Group using the NIST Framework.
• Maintains, monitors, responds to, and tracks cyber security threats as published.
• Conducts weekly Penetration (Pen) Tests and tracks deficiencies as they are resolved utilizing Nessus.
• Works with IT Manager to coordinate resolution based on the severity of the threat, current trends, and best practices.
• Coordinates with 3rd Party security organizations to audit and manage the state of cyber threat preparedness.
• Tracks 3rd party deliverables and makes recommendations regarding vendor performance.
• Monitors versions of essential software, operating systems, network configurations, and tracks vulnerabilities for all unpatched versions.
• Responsible for patching operating systems and deploying updated versions of essential software.
• Maintains current system access control including Multi-Factor Authentication (MFA) via 365 or 3rd party programs, Active Directory, Access Control Lists, and Access Segmentation.
• Conducts cyber-forensic reviews of logs and network access including reports on potential breaches and attempts to penetrate Lewis Energy Group security.
• Utilizes Microsoft Azure Sentinel to analyze all logs and develop workbooks for log investigation.
• Conducts and publishes results of phishing attacks to management.
• Tracks and completes all cyber security tickets in the help desk system.

Requirements

• Two year associates degree or higher and minimum three years related experience.
• Deep understanding of network and device security.

Nice-to-haves

• Preferred Certifications include: Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA).
• Microsoft Certifications or Equivalent Experience.
• Basic understanding of NIST.