Analyst, Security

Socket.dev; Owensboro (KY); On-site; USD 55,000 - 75,000; Full time

Benefits offered by this job

Medical

Vision

Dental

Supplemental Life Insurance

Dependent Life Insurance

Flexible Spending Account

Wellness Programs

Service Awards

Educational Reimbursement

Fitness Reimbursement

Holidays

Paid Time Off

Parental & Maternity Leave

401K

Job summary

Socket.dev is seeking a security analyst in Owensboro, KY to monitor, detect, and respond to cybersecurity threats across IT and OT environments. The role emphasizes defense-in-depth, collaboration with teams, and supporting incident response throughout the NIST lifecycle.

Ideal candidates have a bachelor’s degree or equivalent experience, knowledge of IT network security, and familiarity with MITRE ATT&CK.

Qualifications

• Bachelor’s degree or equivalent experience required.
• Entry-level experience in security or related area.
• Knowledge in IT network security.
• Familiarity with the MITRE ATT&CK framework.
• Understanding of TCP/IP networking and firewalls.
• Willingness to learn and work independently.

Responsibilities

• Perform installation and maintenance of security infrastructure hardware and software.
• Monitor security alerts and telemetry across SIEM, EDR/XDR, and OT monitoring platforms; triage and escalate per incident response plan.
• Conduct threat hunting using the MITRE ATT&CK framework.
• Perform vulnerability management activities and track remediation across IT and OT assets.
• Maintain and tune access control rules, correlation logic, and alerting to reduce false positives.
• Facilitate process improvements for threat detection and response.
• Maintain knowledge of modern network security tools and threat landscape.
• Collaborate with other teams to ensure security is integrated into projects.
• Support incident response across the full NIST lifecycle: preparation to post-incident review.
• Investigate cloud and identity platform alerts (Microsoft 365, Entra ID, XDR) and phishing workflows.
• Analyze email security verdicts and manage quarantine remediation processes.
• Author and refine detection queries (KQL, SPL) and dashboards.
• Support endpoint, network, and firewall security operations and policy review.
• Research security info sources to aid threat identification.
• Contribute to security awareness initiatives and phishing simulations.

Skills

IT network security

MITRE ATT&CK familiarity

TCP/IP networking

Threat detection

Problem solving

Communication skills

Team collaboration

Initiative & independence

Education

Bachelor’s degree or equivalent experience

Advanced degree

Job description

Overview

Job OverviewThe security analyst monitors, detects, investigates, and responds to cybersecurity threats across the organization’s enterprise IT and operational technology (OT) environments, and maintains and operates the organization’s physical access control systems. This is a converged role: the analyst works fluently across corporate networks, cloud and identity platforms, and industrial control systems, applying a defense-in-depth approach that respects the distinct risk tolerances, availability requirements, and safety considerations of each domain. The analyst will work closely with other teams to ensure security is designed and implemented into new and existing projects.Company Overview

Since 1904, Southern Star has proudly served as a reliable natural gas transporter to America’s heartland. Southern Star is an innovative, customer-oriented company committed to collaboration in all parts of our business. With over a century of trusted service, we continue to prioritize what sets us apart—our people.

At Southern Star, you’ll find a workplace where your growth matters, your voice is heard, and your contributions are recognized. Whether you're just starting out or looking to take the next big step in your career, Southern Star is the employer of choice where you can make a meaningful impact.

Will you be the next talented individual to join our team?

Benefits Overview

We believe great work deserves great rewards. In exchange for your passion and expertise, we provide a benefits package that supports your well-being and growth in all aspects of life.

• Medical
• Vision
• Dental
• Supplemental Life Insurance
• Dependent Life Insurance
• Flexible Spending Account
• Wellness Programs
• Service Awards
• Educational Reimbursement
• Fitness Reimbursement
• Holidays
• Paid Time Off
• Parental & Maternity Leave
• 401K

Responsibilities

• Performing installation and maintenance of security infrastructure hardware and software
• Monitoring security alerts and telemetry across SIEM, EDR/XDR, and OT monitoring platforms, and proactively reviewing internal and external-facing environments for signs of anomalous or malicious activity; triaging, investigating, and escalating per the incident response plan
• Conducting threat hunting using the MITRE ATT&CK framework and MITRE ATT&CK for IC
• Performing vulnerability management activities, including scanning, prioritization, remediation tracking, and risk acceptance documentation, across both IT and OT asset inventories
• Maintaining and tuning access control rules, correlation logic, and alerting to reduce false positives and improve mean-time-to-detect and mean-time-to-respond
• Facilitating process improvements for more effective threat detection and response
• Maintaining knowledge of modern network security tools, technologies, and threat landscape
• Working closely with other teams to ensure network security is designed and implemented into new projects
• Supporting incident response across the full NIST lifecycle, including preparation, detection and analysis, containment, eradication, recovery, and post-incident review
• Investigating alerts within cloud and identity platforms, such as Microsoft 365, Entra ID, XDR platforms, conditional access, and privileged access events
• Analyzing email security verdicts, conducting phishing and business email compromise investigations, and managing quarantine and remediation workflows
• Authoring and refining detection queries (e.g., KQL, SPL) and dashboards
• Supporting endpoint, network, and firewall security operations and policy review
• Regularly research and monitor security-related information sources to aid in the identification of threats
• Contributing to security awareness initiatives, phishing simulation analysis, and reporting metrics for leadership
• Develops knowledge of business processes, network protocols, and system architecture
• Researching and testing updates to existing technology; suggest new technologies
• Maintaining relationships with customers
• Participating on IT related projects as well as cross-functional teams
• Receiving general instructions and ability to work independently
• Continuous self-improvement and willingness to learn

Qualifications

Minimum Qualification

• Bachelor’s degree or equivalent experience
• Entry-level experience in security or related area (Will also consider candidates with more experience).
• Knowledge in IT network security
• Knowledge of network forensics, data loss prevention, packet analysis, vulnerability management, and security operations
• Familiarity with the MITRE ATT&CK framework and the cyber kill chain
• Understanding of TCP/IP networking, segmentation, firewalls, and common attack techniques
• Strong problem-solving skills
• Strong communication skills
• Ability to collaborate with other technical groups to find solutions
• A desire to expand current knowledge and skills
• Well organized, willing to take initiative, and work independently

Preferred Qualification

• Advanced degree
• Exposure to OT/ICS environments, or a demonstrated willingness to develop OT competency
• Scripting or automation familiarity (e.g., PowerShell, Python) for SOAR or remediation workflows
• Linux competency

License and Insurability

A valid driver’s license and insurability under company policy are required.