Cyber Security Analyst

The Cybersecurity Analyst is a key member of the IT Infrastructure & Security team within DCC Propane's Digital & IT organization, responsible for supporting the company's cybersecurity coverage and completeness, risk identification and mitigation, and compliance efforts across both corporate systems and field operations. This role plays an essential part in protecting DCC Propane's customer data, operational systems, and digital platforms by ensuring full and complete security tools coverage and monitoring of threats, supporting incident response, and strengthening security controls across the enterprise. Operating in a highly distributed environment that includes office users, field technicians, customer platforms, and third‑party systems, this role must balance strong attention to technical execution with practical business collaboration. The Analyst will work closely with stakeholders across operations, customer service, and digital teams to ensure appropriate security coverage is in place and embed secure practices into day‑to‑day workflows to improve the company's overall security posture without disrupting business operations. This role will also support in the day to day operations of the overall IT Infrastructure and Security team in both projects and ticket resolution as needed. Key Responsibilities Ensure Complete & Full Security Coverage Effectively monitor and maintain complete and full security coverage of all endpoints with cyber security monitoring tools as provided in the DCC Energy corporate security program.Identity & Access Management: Okta, Microsoft Entra Endpoint Management: Intune Email Security: Mimecast, Exchange Vulnerability & Monitoring: Tenable, SIEM (Secureworks/Taegis) Assist with system configuration, troubleshooting, and continuous optimization in partnership with senior team members. Security Operations & Incident Response Monitor tools and dashboards and respond to security alerts in collaboration with our security partners across identity, endpoint, network, and cloud environments. Respond to case notes, investigate, triage, and escalate cybersecurity incidents, supporting containment and resolution activities. Coordinate with vendors that support security monitoring activities (e.g., SaaS platforms, identity providers, network tools) and implement remediation as directed. Document incidents, root cause findings, and remediation actions to support audit and continuous improvement. Vulnerability Management & Risk Reduction Execute vulnerability scans and support prioritization and tracking of remediation efforts across IT and digital platforms (Taegis / Tenable). Assist with penetration testing coordination and ensure findings are documented and resolved. Partner with infrastructure and application teams to drive timely remediation aligned to business risk and operational impact. Identity, Access & Endpoint Security Support identity and access management processes, including provisioning, deprovisioning, and access reviews. Help enforce least‑privilege access and secure authentication practices across systems such as Okta and Microsoft Entra. Assist with endpoint security and device compliance (e.g., Intune), including support for field devices and mobile users. Troubleshoot access and authentication issues impacting employees, technicians, and third‑party users. Email, Web & Customer Platform Security Support protection of email systems, customer communications, and web platforms from phishing, malware, and external attacks through monitoring of security solutions and partnership with the business to drive education and awareness of risk. Assist in administration of tools such as Mimecast, Checkpoint Harmony ,Zscaler, Cloudflare (DNS), and web application firewalls. Help ensure the availability and security of customer‑facing platforms, digital portals, and integrations (e.g., HubSpot, Docusign, Luminance, websites). Act as a supporting technical contact for security‑related issues impacting digital customer experiences. Stakeholder Collaboration & Security Enablement Partner with teams across operations, customer service, finance, and digital platforms to promote secure system usage. Translate cybersecurity requirements into practical, easy‑to‑follow guidance for non‑technical users, including field employees. Support digital transformation initiatives (e.g., system integrations, workflow automation, field mobility) by identifying risks and recommending security improvements. Help drive a shared ownership model for security, ensuring it is embedded into daily business processes rather than centralized in IT alone. Compliance, Audit & Governance Assist in internal and external audit activities, including evidence collection and documentation. Track and support remediation of audit findings and security control gaps. Help maintain and update cybersecurity policies, standards, and procedures aligned to DCC Propane requirements and industry frameworks. Security Awareness & Culture Support phishing simulation programs and cybersecurity awareness training initiatives. Engage with employees across office and field environments to promote safe behaviors and reduce human risk. Contribute to building a practical, business‑aligned security culture that supports both compliance and operational efficiency. General and Ongoing Support Assist where needed in ongoing IT Infrastructure & security projects and help desk tickets to support the ongoing operations of the business and ensure end to end support is optimized. Qualifications and Experience Required Qualifications: Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent hands‑on experience) 2-5 years of experience in IT, cybersecurity, or infrastructure support roles Foundational knowledge of: Security monitoring and incident response Vulnerability management and remediation processes Identity and access management (IAM) concepts Endpoint, email, and web security fundamentals Experience supporting Microsoft‑based environments and common SaaS platforms Strong analytical and problem‑solving skills with high attention to detail Ability to communicate technical concepts clearly to non‑technical users Experience supporting audit, compliance, or risk management activities Demonstrated ability to collaborate across teams and support business stakeholders Willingness to learn, adapt, and grow within a fast‑paced Digital & IT environment Willingness and ability to travel as required to support a distributed workforce and the needs of field requests across multiple sites. Preferred Qualifications: Industry certifications such as Security+, SSCP, or equivalent (or in progress) Hands‑on experience with tools such as Okta, Microsoft Entra, Intune, Mimecast, Zscaler, Cloudflare, Tenable, or SIEM platforms. Experience supporting a distributed workforce, including field technicians and mobile devices Exposure to cybersecurity practices within energy, utilities, logistics, or field service‑based industries Familiarity with security frameworks such as NIST CSF, CIS Controls, or ISO 27001 Understanding of integrated enterprise platforms (e.g., CRM, ERP, customer portals) and their security considerations Demonstrated ability to influence secure behaviors and promote adoption of security best practices across business teams Physical/Working Requirements The work environment characteristics described are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be available to enable individuals with disabilities to perform the essential functions. This position is hybrid and requires you to frequently work from an office environment. Prolonged sitting at a desk and working on a computer. Must be able to position, transport, lift and/or move up to 50 pounds at a time in an office environment. Stand, walk, move across large areas. Communicate with and exchange information verbally and in writing. Move about in an office environment. Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus. The noise level in the work environment is usually moderate. This job description is not intended to describe in detail the multitude of tasks that may be assigned, but rather to provide the employee with a general sense of the responsibilities and expectations of his/her position. It is not intended to be an exhaustive list of qualifications, skills, efforts, duties, responsibilities or working conditions associated with the position. As the nature of business demands change so, too, may the essential functions of this position. DCC Propane is an equal opportunity employer. We value diversity and inclusion at our company. We do not discriminate based on race, color, religion, age, national origin, gender, gender identity, sexual orientation, marital status, veteran status, military status, or disability status. #J-18808-Ljbffr