Analyst, Security

Southern Star Central Gas Pipeline; Owensboro (KY); On-site; USD 60,000 - 90,000; Full time

Benefits offered by this job

Medical

Vision

Supplemental Life Insurance

Flexible Spending Account

Wellness Programs

Service Awards

Educational Reimbursement

Fitness Reimbursement

Holidays

Paid Time Off

Parental & Maternity Leave

401K

Job summary

The Security Analyst at Southern Star Central Gas Pipeline monitors, detects, investigates, and responds to cybersecurity threats across IT and OT environments, ensuring security is built into projects and operations.

Based in Owensboro, KY, this role requires collaboration with IT and OT teams, threat hunting using MITRE ATT&CK, and strong focus on incident response, vulnerability management, and access control tuning to reduce risk.

Qualifications

• Bachelor’s degree or equivalent experience.
• Entry-level experience in security or related area (Will also consider candidates with more experience).
• Knowledge in IT network security.
• Knowledge of network forensics, data loss prevention, packet analysis, vulnerability management, and security operations.
• Familiarity with the MITRE ATT&CK framework and the cyber kill chain.
• Understanding of TCP/IP networking, segmentation, firewalls, and common attack techniques.
• Strong problem-solving skills.
• Ability to collaborate with other technical groups to find solutions.
• A desire to expand current knowledge and skills.
• Well organized, willing to take initiative, and work independently.

Responsibilities

• Performing installation and maintenance of security infrastructure hardware and software.
• Monitoring security alerts and telemetry across SIEM, EDR/XDR, and OT monitoring platforms, and proactively reviewing internal and external-facing environments for signs of anomalous or malicious activity; triaging, investigating, and escalating per the incident response plan.
• Conducting threat hunting using the MITRE ATT&CK framework and MITRE ATT&CK for ICS as detection and investigation frameworks.
• Performing vulnerability management activities, including scanning, prioritization, remediation tracking, and risk acceptance documentation, across both IT and OT asset inventories.
• Maintaining and tuning access control rules, correlation logic, and alerting to reduce false positives and improve mean-time-to-detect and mean-time-to-respond.
• Facilitating process improvements for more effective threat detection and response.
• Maintaining knowledge of modern network security tools, technologies, and threat landscape.
• Working closely with other teams to ensure network security is designed and implemented into new projects.
• Supporting incident response across the full NIST lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post-incident review.
• Investigating alerts within cloud and identity platforms, such as Microsoft 365, Entra ID, XDR platforms, conditional access, and privileged access events.
• Analyzing e-mail security verdicts, conducting phishing and business e-mail compromise investigations, and managing quarantine and remediation workflows.
• Authoring and refining detection queries (e.g., KQL, SPL) and dashboards.
• Supporting endpoint, network, and firewall security operations and policy review.
• Regularly research and monitor security-related information sources to aid in the identification of threats.
• Contributing to security awareness initiatives, phishing simulation analysis, and reporting metrics for leadership.
• Develops knowledge of business processes, network protocols, and system architecture.
• Researching and testing updates to existing technology; suggest new technologies.
• Maintaining relationships with customers.
• Participating on IT related projects as well as cross-functional teams.
• Receiving general instructions and ability to work independently.
• Continuous self-improvement and willingness to learn.

Skills

IT network security

Network forensics

Data loss prevention

Vulnerability management

Security operations

MITRE ATT&CK

TCP/IP networking

Firewalls

Problem solving

Collaboration

Independent work

Education

Bachelor’s degree or equivalent experience

Advanced degree

Tools

PowerShell

Python

Job description

The security analyst monitors, detects, investigates, and responds to cybersecurity threats across the organization’s enterprise IT and operational technology (OT) environments, and maintains and operates the organization’s physical access control systems. This is a converged role: the analyst works fluently across corporate networks, cloud and identity platforms, and industrial control systems, applying a defense-in-depth approach that respects the distinct risk tolerances, availability requirements, and safety considerations of each domain. The analyst will work closely with other teams to ensure security is designed and implemented into new and existing projects.

Overview

Company overview: Southern Star has proudly served as a reliable natural gas transporter to America’s heartland. Southern Star is an innovative, customer-oriented company committed to collaboration in all parts of our business. With over a century of trusted service, we continue to prioritize what sets us apart—our people. Will you be the next talented individual to join our team?

Benefits

We believe great work deserves great rewards. In exchange for your passion and expertise, we provide a benefits package that supports your well-being and growth in all aspects of life.

• Medical
• Vision
• Supplemental Life Insurance
• Flexible Spending Account
• Wellness Programs
• Service Awards
• Educational Reimbursement
• Fitness Reimbursement
• Holidays
• Paid Time Off
• Parental & Maternity Leave
• 401K

Responsibilities

• Performing installation and maintenance of security infrastructure hardware and software
• Monitoring security alerts and telemetry across SIEM, EDR/XDR, and OT monitoring platforms, and proactively reviewing internal and external-facing environments for signs of anomalous or malicious activity; triaging, investigating, and escalating per the incident response plan
• Conducting threat hunting using the MITRE ATT&CK framework and MITRE ATT&CK for ICS as detection and investigation frameworks
• Performing vulnerability management activities, including scanning, prioritization, remediation tracking, and risk acceptance documentation, across both IT and OT asset inventories
• Maintaining and tuning access control rules, correlation logic, and alerting to reduce false positives and improve mean-time-to-detect and mean-time-to-respond
• Facilitating process improvements for more effective threat detection and response
• Maintaining knowledge of modern network security tools, technologies, and threat landscape
• Working closely with other teams to ensure network security is designed and implemented into new projects
• Supporting incident response across the full NIST lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post-incident review
• Investigating alerts within cloud and identity platforms, such as Microsoft 365, Entra ID, XDR platforms, conditional access, and privileged access events
• Analyzing e-mail security verdicts, conducting phishing and business e-mail compromise investigations, and managing quarantine and remediation workflows
• Authoring and refining detection queries (e.g., KQL, SPL) and dashboards
• Supporting endpoint, network, and firewall security operations and policy review
• Regularly research and monitor security-related information sources to aid in the identification of threats
• Contributing to security awareness initiatives, phishing simulation analysis, and reporting metrics for leadership
• Develops knowledge of business processes, network protocols, and system architecture
• Researching and testing updates to existing technology; suggest new technologies
• Maintaining relationships with customers
• Participating on IT related projects as well as cross-functional teams
• Receiving general instructions and ability to work independently
• Continuous self-improvement and willingness to learn

Qualifications

Minimum Qualifications:

• Bachelor’s degree or equivalent experience
• Entry-level experience in security or related area (Will also consider candidates with more experience)
• Knowledge in IT network security
• Knowledge of network forensics, data loss prevention, packet analysis, vulnerability management, and security operations
• Familiarity with the MITRE ATT&CK framework and the cyber kill chain
• Understanding of TCP/IP networking, segmentation, firewalls, and common attack techniques
• Strong problem-solving skills
• Ability to collaborate with other technical groups to find solutions
• A desire to expand current knowledge and skills
• Well organized, willing to take initiative, and work independently

Preferred Qualifications

• Advanced degree
• Exposure to OT/ICS environments, or a demonstrated willingness to develop OT competency
• Scripting or automation familiarity (e.g., PowerShell, Python) for SOAR or remediation workflows

A valid driver’s license and insurability under company policy are required.