Security Analyst

Neptune Technology Group Inc. is a technology company serving water utilities across North America. Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service. With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water

• For additional information, please visit the company website at

Position Summary: Security Anal yst As a Security Analyst within Neptune's Security Operations Center (SOC), you will be responsible for monitoring, investigating, and responding to cybersecurity threats across Neptune's enterprise environment. You will investigate escalated alerts and detections, support incident response activities, coordinate with IT Operations and Engineering teams, and assist with the administration, configuration, and tuning of security to ols.The Security Analyst plays a critical role in protecting Neptune's systems, users, data, and business operations by identifying, containing, and mitigating cyber threats while supporting the continuous improvement of Neptune's security monitoring and response capabilit ies. Responsibili ties: Security Monitoring & Threat Det ectionMonitor security events, alerts, and detections across Neptune's security pla tformsInvestigate escalated alerts and suspicious activity identified through security monitoring toolsAnalyze security events to determine legitimacy, impact, and required response a ctionsIdentify indicators of compromise, malicious activity, and emerging t hreatsPerform threat hunting activities to proactively identify potential security risksMonitor security dashboards and ensure timely response to security events Incident Response & Invest igationParticipate in cybersecurity incident response activities, including investigation, containment, eradication, and r ecoveryPerform initial triage and analysis of security in cidentsCollect and analyze forensic artifacts, logs, and endpoint telemetry during investi gationsDocument findings, response actions, and lessons learnedEscalate incidents appropriately based on severity and impactSupport root cause analysis and post-incident reviews Security Operations & Colla borationCoordinate with IT Operations, Infrastructure, Engineering, and Application teams during investigations and remediation ac tivitiesSupport vulnerability management efforts by identifying and tracking remediation ac tivitiesAssist with security reviews of systems, applications, and infras tructureParticipate in security projects and operational ini tiativesSupport security awareness and operational readiness effortsCollaborate with Neptune's MSSP and third-party security partners during invest igations Security Tool Administration & En gineeringSupport the configuration, administration, maintenance, and tuning of secur ity toolsAssist with detection rule creation, tuning, and opt imizationValidate security telemetry and log ingestion across monitoring platformsSupport security automation and orchestration in itiativesParticipate in the deployment and implementation of new security tec hnologiesAssist with dashboard creation, reporting, and security metrics de velopment Compliance & Governan ce SupportSupport compliance initiatives aligned with NIST, CIS Controls, ISO 27001, and Roper Cybersecurity re quirementsAssist with audit requests, evidence collection, and security doc umentationMaintain incident records, procedures, and operationa l runbooksSupport continuous improvement of SOC processes and procedures Relevant Platforms (experience with several expected):CrowdSt rike FalconGoogle SecOps (Chronicle)Microso ft DefenderSIE M PlatformsEndpoint Detection and Response (EDR ) PlatformsSecurity Orchestration, Automation, and Resp onse (SOAR) Minimum Qua lifications:Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)2+ years of experience in cybersecurity, security operations, IT operations, or related tec hnical fieldExperience investigating security alerts, detections, a nd incidentsUnderstanding of security concepts including malware, phishing, identity attacks, vulnerabilities, and netw ork securityFamiliarity with SIEM, EDR, and security monitori ng platformsStrong analytical and problem-so lving skillsExcellent written and verbal communic ation skillsAbility to work independently and collaboratively within a team environment Preferred Qu alifications:3+ years of Security Operations Center (SO C) experienceExperience with CrowdStrike Falcon, Google SecOps, Microsoft Defender, or simi lar platformsExperience with incident response and digital forensics i nvestigationsExperience with vulnerability manage ment programsFamiliarity with MITRE ATT& ;CK FrameworkExperience with cloud security technologies and environmentsKnowledge of NIST Cybersecurity Framework and CIS ControlsExperience with scripting or automation (PowerS hell, Python) Certifications (One or Mo re Prefer red): Secu rity +CyS A+GSECGCIHGCIACISSP (Asso ciate or Ful l)SC-200SC-900CrowdStrike CertificationsGoogle SecOps Certifications Years of Experience (IT, Security & a mp; Compliance)2–5 years of Information Technology, Cybersecurity, Security Operations, Compliance, or Incident Resp onse expe - rience EducationBachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related - field preferredEquivalent military, technical, or professional experience wi ll be considered #J-18808-Ljbffr Socket.dev