Cyber Security Analyst

Primoris Services Corporation; Texas; On-site; USD 110,000 - 120,000; Full time

Benefits offered by this job

401k w/employer match

Health/Dental/Vision insurance plans

Paid time off

10 paid holidays

Stock purchase plan

Job summary

Primoris Services Corporation is seeking a Cybersecurity Analyst – SOC Operations to monitor security tools, investigate alerts, and drive incident response across enterprise environments including endpoints, identity, and cloud services.

Responsibilities include triage of incidents, remediation, and collaboration with IT teams to minimize cyber risk, with a focus on continuous improvement of detection and response capabilities.

Qualifications

• 5+ years of Cybersecurity experience required.
• CrowdStrike Falcon experience required.
• Experience with SIEM platforms (Microsoft Sentinel, Splunk Enterprise Security) is required.
• EDR/XDR such as Microsoft Defender for Endpoint.
• Identity and access security experience (Entra ID/AD).
• Automation, scripting in PowerShell or Python preferred.
• SOAR and security automation familiarity.

Responsibilities

• Monitor enterprise security tools and alerts for suspicious activity.
• Investigate and triage security incidents and correlate threat intelligence.
• Contain and remediate cybersecurity risks following playbooks.
• Analyze endpoint, identity, and network security events.
• Support cloud security monitoring and remediation efforts.
• Contribute to incident response playbooks and after-hours activities.

Skills

Cybersecurity experience

Threat detection

Incident response

Security monitoring

Scripting (PowerShell, Python)

Tools

CrowdStrike Falcon

Microsoft Sentinel

Splunk Enterprise Security

Microsoft Defender for Endpoint

Zscaler

Job description

Job Overview

The Cybersecurity Analyst – SOC Operations is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise environment. This role serves as a key member of the Security Operations Center (SOC) and focuses on threat detection, incident response, endpoint security, identity threats, and security monitoring of enterprise infrastructure, cloud environments, and critical business systems.

The analyst will investigate security alerts, triage incidents, correlate threat intelligence, and collaborate with IT and infrastructure teams to contain and remediate cybersecurity risks. This position plays an operational role in maintaining enterprise security visibility and minimizing cyber risk exposure.

Key Responsibilities/Accountabilities

Security Monitoring & Threat Detection

• Monitor enterprise security tools and alerts for suspicious activity, malicious behavior, or policy violations.
• Analyze and triage security events generated from:
  • SIEM platforms
  • Endpoint Detection & Response (EDR)
  • Email security platforms
  • Network monitoring tools
  • Identity and access monitoring solutions
  • Cloud security platforms
• Investigate indicators of compromise (IOCs), anomalous behaviors, and suspicious user activity.
• Correlate logs and events across multiple security systems to identify threats.
• Escalate high-risk incidents according to playbooks and incident severity classifications.

Incident Response

• Participate in cybersecurity incident response activities including:
  • Detection
  • Triage
  • Containment
  • Eradication
  • Recovery
  • Post-incident review
• Investigate phishing, malware, ransomware, account compromise, insider threat, and unauthorized access incidents.
• Document incident findings, root cause analysis, and remediation recommendations.
• Support after-hours cybersecurity response activities when necessary.

Endpoint, Identity & Network Security

• Monitor endpoint security posture and investigate endpoint-related threats.
• Analyze authentication anomalies including:
  • Privileged account misuse
  • Impossible travel
  • MFA anomalies
  • Suspicious logins
  • Excessive failed authentication attempts
• Support Zero Trust security initiatives through continuous monitoring of identity, device, and access risks.
• Investigate unusual network behavior and lateral movement attempts.

Cloud Security Monitoring

• Monitor cloud security events across Microsoft 365, Azure, SaaS platforms, and enterprise cloud services.
• Investigate risky cloud behaviors, privilege escalation, abnormal sharing, and unauthorized access attempts.
• Assist with remediation of cloud security findings and misconfigurations.

Vulnerability & Exposure Management Support

• Review vulnerability scan results and assist with prioritization of remediation activities.
• Validate remediation of critical vulnerabilities.
• Monitor exposure trends and recurring weaknesses affecting enterprise systems.

Security Automation & Continuous Improvement

• Assist in developing playbooks and incident response procedures.
• Support SOAR workflows and automation initiatives.
• Identify opportunities to improve detection coverage and operational efficiencies.
• Contribute to lessons learned and continuous improvement activities.

Requirements / Basic Qualifications

• 5+ years of Cybersecurity experience required
• CrowdStrike Falcon experience required
• Security Monitoring & Detection:
• SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, or similar
• EDR/XDR solutions such as Microsoft Defender for Endpoint or comparable platforms
• Security log analysis and event correlation
• Identity & Access Security:
• Identity monitoring in environments such as:
  • Microsoft Entra ID
  • Active Directory
  • Privileged Access Management systems
• Authentication threat analysis
• Network & Cloud Security:
• Firewall, DNS, proxy, and network telemetry analysis
• Experience with:
  • Zscaler
  • Microsoft security ecosystem
  • Cloud security monitoring tools
• Familiarity with SaaS and remote-access security models
• Automation & Response:
• Experience with scripting (PowerShell, Python, or Bash preferred)
• Familiarity with SOAR and security automation

Preferred Certifications

Preferred certifications include:

• CompTIA Security+
• CompTIA CySA+
• GCIH
• AZ-500
• CISSP (preferred for senior analyst level)

PAY EQUITY

$110,000 - $120,000

Primoris Renewable Energy provides the following compensation range and general description of other compensation and benefits that it in good faith believes it might pay and/or offer for this position. This compensation range is based on a full-time schedule. Primoris Renewable Energy reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, or federal law.

Company Overview

Primoris Services Corporation is a premier specialty contractor providing critical infrastructure services to the utility, energy, and renewables markets throughout the United States and Canada. Built on a foundation of trust, we deliver a range of engineering, construction, and maintenance services that power, connect, and enhance society. On projects spanning utility-scale solar, renewables, power delivery, communications, and transportation infrastructure, we offer unmatched value to our clients, a safe and entrepreneurial culture to our employees, and innovation and excellence to our communities. To learn more, visit www.prim.com and follow us on social media at @PrimorisServicesCorporation.

Benefits

• 401k w/employer match
• Health/Dental/Vision insurance plans
• Paid time off
• 10 paid holidays
• Stock purchase plan

EEO Statement

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

Equal Opportunity Employer

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.