IT Cybersecurity Analyst

Summa, S.A. - Houston, TX

Full-time

Houston, TX

Professional, Scientific, and Technical Services

About the position

As an IT Cyber Security Analyst, you will play a crucial role in protecting our digital infrastructure and safeguarding sensitive data. This position is based in the vibrant Galleria area of Houston, Texas, and offers a unique opportunity to work in a dynamic and supportive environment. You will be part of a proactive team dedicated to enhancing the security and reliability of our operations. Your contributions will directly impact the organization's ability to defend against cyber threats and ensure the integrity of our systems. In this role, you will be responsible for continuous monitoring of network traffic across various environments, including data centers, remote sites, cloud infrastructure, and ICS/SCADA systems. You will identify and mitigate potential cyber threats, ensuring that our digital assets remain secure. Additionally, you will play a key role in incident response efforts, investigating security incidents, analyzing root causes, and coordinating remediation efforts to protect our operations. You will assist in planning and designing enterprise security architecture, developing and maintaining essential security documents such as policies, standards, guidelines, and procedures. Your involvement in risk management will include participating in the design of strategies and plans to protect against cyber threats, including business continuity and disaster recovery plans. Regular vulnerability assessments and penetration tests will be part of your responsibilities, where you will identify weaknesses in systems and networks and recommend improvements. Ensuring compliance with industry-specific cybersecurity regulations and standards, such as CIS Controls v8, NIST SP 800-82, ISA/IEC 62443, and API RP 1164, will also be a critical aspect of your role. You will promote a culture of cybersecurity awareness by providing guidance and training to employees and contractors on best practices, monitor and respond to phishing emails, and maintain IAM systems to ensure proper use of permissions by authorized users. Finally, you will perform computer and network forensics to gather and preserve evidence from devices and prepare detailed reports on security incidents and responses. This position is ideal for an IT professional passionate about cybersecurity, eager to learn, innovate, and make a meaningful impact in the field.

Responsibilities

• Continuous monitoring of network traffic across data centers, remote sites, cloud infrastructure, and ICS/SCADA systems to identify and mitigate potential cyber threats.
• Participate in incident response efforts, investigating security incidents, analyzing root causes, and coordinating remediation.
• Assist in planning and designing enterprise security architecture and develop and maintain enterprise security documents, including policies, standards, guidelines, and procedures.
• Participate in the planning and design of risk management strategies, business continuity plans, and disaster recovery plans.
• Conduct regular vulnerability assessments and penetration tests on systems and networks, identifying weaknesses and recommending improvements.
• Ensure compliance with industry-specific cybersecurity regulations and standards, including CIS Controls v8, NIST SP 800-82, ISA/IEC 62443, and API RP 1164.
• Promote a culture of cybersecurity awareness by providing guidance and training to employees and contractors on best practices.
• Monitor and respond to phishing emails and maintain IAM systems, ensuring proper use of permissions by authorized users.
• Perform computer/network forensics to gather and preserve evidence from devices and prepare detailed reports on security incidents and responses.

Requirements

• 1-4 years of experience in Cyber Security, Network Administration, or Systems Administration, or an equivalent combination of education and experience.
• Solid understanding of network systems administration and architecture.
• Proficiency in networking concepts (TCP/IP) and operating systems (Windows/Linux).
• Familiarity with key security tools such as NGFW, Proxies, SIEM, EDR/XDR, and IPS/IDS.
• Experience with Windows Server, File Services, and Active Directory.
• Understanding of ICS/SCADA systems and OT security practices.
• Knowledge of security frameworks and standards, including NIST and CIS.
• Strong analytical and problem-solving skills, effective communication, and a collaborative team spirit.
• Ability to thrive in high-pressure situations while maintaining professionalism.

Nice-to-haves

• Certifications like CompTIA Network+, CompTIA Security+, CompTIA CYSA+, or CCNA are highly valued.

Benefits

• Opportunity to grow your career in cybersecurity while making a meaningful impact.
• Work with cutting-edge technologies and develop your expertise.
• Contribute to securing critical infrastructure.