Cyber Security Analyst

Job DetailsJob Location: Flowco Corporate - Houston, TX 77056Position Summary  The Cyber Security Analyst is responsible for protecting the organization's information assets through proactive monitoring, threat detection, incident response, vulnerability management, and operational security activities. The role supports the IT Cyber Security Manager in executing the organization's cybersecurity strategy and maintaining a secure technology environment.    The Cyber Security Analyst serves as a trusted advisor by balancing cybersecurity risk with business objectives and helping ensure the organization's security program aligns with industry frameworks including the NIST Cybersecurity Framework (CSF 2.0), CIS Critical Security Controls, and Microsoft Security Best Practices.    The Cyber Security Analyst is expected to exercise sound judgment, communicate effectively with technical and non-technical stakeholders, and escalate risks and significant security events to the IT Cyber Security Manager when appropriate.  Key Responsibilities  Security Operations  Monitor and investigate security events across endpoint, identity, email, cloud, and network security platforms.  Analyze alerts and coordinate response actions.  Assist with incident response, documentation, and threat hunting.  Vulnerability & Risk Management  Prioritize vulnerabilities based on business risk.  Coordinate remediation and validate corrective actions.  Assist with penetration testing and remediation tracking.  Identity, Cloud & Endpoint Security  Monitor Entra ID, endpoint security, Microsoft 365, and privileged access.  Review application permissions and service principals.  AI Security & Governance  Support secure AI adoption.  Monitor for Shadow AI.  Evaluate AI solutions for security and privacy risks.  Security Engineering & Administration  Administer and tune cybersecurity technologies.  Develop security automation using PowerShell or Microsoft Graph.  Governance, Risk & Compliance  Support NIST CSF 2.0, CIS Controls, audits, documentation, and risk assessments.  Security Awareness & Collaboration  Support awareness training.  Collaborate across IT and business teams.  Stay current on emerging threats.  QualificationsQualifications  Required  Bachelor's degree or equivalent experience.  3–5 years of cybersecurity or security-focused systems administration experience.  Strong analytical and communication skills.  Working knowledge of Windows Server, Active Directory, networking, and Microsoft 365.  Preferred Experience  Microsoft Defender suite, Entra ID, Purview, Sentinel, Intune  CrowdStrike, Fortinet, Endpoint Central  Azure, PowerShell, Microsoft Graph API  Preferred Certifications  Security+  CySA+  SC-200  SC-300  AZ-500  CISSP (or pursuing)