Security Analyst I in FORT SMITH, Arkansas at Summit Utilities
Explore Related Opportunities
Job Description
POSITION SUMMARY
The Security Analyst I protects Summit Utilities' business systems, operational technology (OT), and data by monitoring for threats, investigating and responding to security events, and owning assigned security control areas from start to finish. This role works across both the corporate IT environment and the Industrial Control Systems (ICS) and SCADA environment that supports Summit's natural gas distribution system, partnering closely with IT, SCADA, and Gas Control teams to keep operations safe, reliable, and secure. Reporting to the Director of Information Security, the Information Security Analyst is an independent contributor who leads Tier-2 investigations, tunes detections, drives vulnerability remediation with system owners, and prepares evidence for audits and assessments aligned to the TSA Pipeline Security Directives, C2M2, NIST CSF, and NERC CIP. The role also helps build a strong security culture through awareness training, interactive exercises, and clear communication with employees at every level of the organization.
PRIMARY DUTIES AND RESPONSIBILITIES
- Monitor security alerts and log data across IT and OT environments; investigate suspicious activity and respond to Tier-2 security events from triage through resolution.
- Document, classify, and track security events and incidents; draft incident reports and escalate major incidents, and any event affecting OT operations, according to the incident response plan.
- Write and tune detection queries and correlation rules to improve alert quality and reduce false positives.
- Perform forensic analysis and evidence collection on suspicious devices; conduct legal hold actions and investigations when required.
- Apply threat intelligence from sources such as CISA and the DNG-ISAC to investigations and detections, mapping activity to MITRE ATT&CK for Enterprise and ICS.
- Coordinate with SCADA Analysts, SCADA Technicians, and Gas Controllers on OT alerts and response, following a safety-first, approval-required approach for any response action in OT environments.
- Review OT network monitoring alerts and support security visibility of control systems, including Remote Terminal Units (RTU), Programmable Logic Controllers (PLC), and field communication technologies.
- Support hardening, configuration, and testing of security updates for IT and OT systems and servers, aligned to operational change windows and high-availability requirements.
- Run and review vulnerability scans; prioritize findings by risk and asset criticality and partner with IT and OT system owners to remediate and track items to closure.
- Review Common Vulnerabilities and Exposures (CVE) and vendor advisories for exposure in IT and OT assets and recommend mitigations or compensating controls.
- Coordinate third-party vulnerability assessments and penetration tests and help develop remediation plans based on the findings.
- Conduct security reviews of applications, systems, and integrations before they go live.
- Manage MFA, SSO, and group policy security configurations and run periodic user and privileged access review cycles.
- Prepare control evidence and support control testing for TSA Security Directive alignment, the C2M2 self-assessment, NERC CIP-aligned controls, and internal and external audits.
- Maintain accurate, current documentation for security systems, procedures, and OT security components.
- Participate in tabletop exercises, disaster recovery, and business continuity planning, including scenarios that cross IT and OT.
- Deliver security awareness content and interactive exercises such as phishing simulations, track completion, and effectiveness for all team members.
- Help develop, communicate, and keep current information security policies, standards, and procedures.
- Help newer analysts onboard and pair with them on investigations.
- Serve as a primary member of the security on-call rotation.
EDUCATION AND WORK EXPERIENCE
- Bachelor's degree in Cybersecurity, Computer Science, Computer Information Systems, Information Technology, or a closely related field. Equivalent experience, including OT Security industry experience, may be considered in lieu of a degree.
- 2-5 years of experience in security operations or a related IT role; exposure to OT/ICS security is strongly preferred.
- Experience with SCADA or control system operations or communications in the natural gas, pipeline, or power industry is preferred.
- Professional certifications preferred: CompTIA Security+, CySA+, GIAC GCIH, or GSEC. Global Industrial Cyber Security Professional (GICSP) is a plus.
KNOWLEDGE, SKILLS, ABILITIES
- Solid knowledge of information security principles and best practices, networking design and protocols, and cryptographic communication and storage protocols.
- Proficiency with log and event analysis, including writing SIEM queries and correlation rules and investigating across multiple data sources.
- Experience with packet capture analysis, investigation protocols, and discovery techniques.
- Working knowledge of endpoint detection and response (EDR), next-generation firewall, and proxy security controls, including configuration and tuning.
- Experience with vulnerability scanning, penetration testing and mapping tools, and system hardening.
- Working knowledge of OT assets and industrial protocols (e.g., Modbus, DNP3, EtherNet/IP, OPC), the Purdue model, and how safety and availability priorities in OT differ from IT.
- Familiarity with security and governance frameworks such as NIST CSF, NIST SP 800-82, ISA/IEC 62443, C2M2, TSA Pipeline Security Directives, NERC CIP, and CIS Controls.
- Understanding of identity and access management concepts, including MFA, SSO, least privilege, and privileged access.
- Working knowledge of cloud security controls, logging, and the shared responsibility model.
- Scripting ability in PowerShell or Python is a plus.
- Decisive, with sound judgment under pressure and a clear sense of when to escalate.
- Strong written and verbal communication skills, with the ability to explain security requirements and risks to everyone from field personnel to leadership.
- Collaborative partner across IT, OT, and business teams; able to manage multiple priorities and meet deadlines.
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and/or skills required of all personnel so classified.
Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice, and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home.
Summit Utilities, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status and will not be discriminated against on the basis of disability or veteran status.
Scan to Apply
Just scan this QR code to apply from your phone.
- Fast
- Easy
- Apply on the go