Hybrid Security Analyst I - IT/OT Threat Defender

Lonestar State College; Fort Smith (AR); Hybrid; USD 65,000 - 90,000; Full time

Job summary

Summit Utilities, Inc. seeks a Security Analyst I to protect IT and OT systems, monitor threats, and own security control areas from detection through remediation. The role collaborates with IT, SCADA, and Gas Control teams and supports audits and compliance activities.

The ideal candidate has a BS in cybersecurity or related field and 2–5 years in security operations, with certifications preferred. A hybrid work model in AR offices is available.

Qualifications

• Solid knowledge of information security principles and best practices.
• Proficient in log and event analysis, and writing SIEM queries.
• Experience with vulnerability scanning and remediation coordination.
• Familiarity with OT assets and industrial protocols is a plus.

Responsibilities

• Monitor security alerts across IT and OT; investigate Tier-2 events from triage to resolution.
• Document, classify, and track security incidents; draft incident reports.
• Write and tune detection queries and correlation rules to improve alert quality.
• Perform forensic analysis and evidence collection.
• Apply threat intel to investigations and align to MITRE ATT&CK.
• Coordinate with SCADA/OT teams on alerts with safety-first approach.
• Review OT network monitoring for control systems (RTU/PLC).
• Support security updates and hardening aligned with change windows.
• Run vulnerability scans and coordinate remediation with owners.
• Review CVEs and vendor advisories for mitigations.
• Coordinate third-party assessments and remediation plans.
• Conduct security reviews before go-live of apps/systems.
• Manage MFA/SSO and privileged access reviews.
• Prepare control evidence for TSA/NERC alignment and audits.
• Maintain current documentation for security components.
• Participate in drills and business continuity planning.
• Deliver security awareness content and phishing simulations.
• Develop, communicate, and update information security policies.
• Onboard newer analysts and participate in on-call rotations.

Skills

Information security

SIEM/log analysis

OT/ICS security

EDR and firewalls

Vulnerability management

Industrial protocols

NIST/ISA frameworks

Identity and access mgmt

Cloud security

Scripting (PowerShell/Python)

Communication skills

Decision making under pressure

Education

Bachelor's degree in Cybersecurity, CS, or related field

Security certifications: CompTIA Security+, CySA+, GIAC GCIH, or GSEC; GICSP is a plus

Tools

SIEM tooling

Packet capture tools

OT/ICS security knowledge

Job description

Summit Utilities, Inc. seeks a Security Analyst I to protect IT and OT systems, monitor threats, and own security control areas from detection through remediation. The role collaborates with IT, SCADA, and Gas Control teams and supports audits and compliance activities.

The ideal candidate has a BS in cybersecurity or related field and 2–5 years in security operations, with certifications preferred. A hybrid work model in AR offices is available.