Security Analyst

Security AnalystNeptune Technology Group Inc. is a technology company serving water utilities across North America. Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service. With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water.As a Security Analyst within Neptune's Security Operations Center (SOC), you will be responsible for monitoring, investigating, and responding to cybersecurity threats across Neptune's enterprise environment. You will investigate escalated alerts and detections, support incident response activities, coordinate with IT Operations and Engineering teams, and assist with the administration, configuration, and tuning of security tools.The Security Analyst plays a critical role in protecting Neptune's systems, users, data, and business operations by identifying, containing, and mitigating cyber threats while supporting the continuous improvement of Neptune's security monitoring and response capabilities.Responsibilities:Security Monitoring & Threat DetectionMonitor security events, alerts, and detections across Neptune's security platformsInvestigate escalated alerts and suspicious activity identified through security monitoring toolsAnalyze security events to determine legitimacy, impact, and required response actionsIdentify indicators of compromise, malicious activity, and emerging threatsPerform threat hunting activities to proactively identify potential security risksMonitor security dashboards and ensure timely response to security eventsIncident Response & InvestigationParticipate in cybersecurity incident response activities, including investigation, containment, eradication, and recoveryPerform initial triage and analysis of security incidentsCollect and analyze forensic artifacts, logs, and endpoint telemetry during investigationsDocument findings, response actions, and lessons learnedEscalate incidents appropriately based on severity and impactSupport root cause analysis and post-incident reviewsSecurity Operations & CollaborationCoordinate with IT Operations, Infrastructure, Engineering, and Application teams during investigations and remediation activitiesSupport vulnerability management efforts by identifying and tracking remediation activitiesAssist with security reviews of systems, applications, and infrastructureParticipate in security projects and operational initiativesSupport security awareness and operational readiness effortsCollaborate with Neptune's MSSP and third-party security partners during investigationsSecurity Tool Administration & EngineeringSupport the configuration, administration, maintenance, and tuning of security toolsAssist with detection rule creation, tuning, and optimizationValidate security telemetry and log ingestion across monitoring platformsSupport security automation and orchestration initiativesParticipate in the deployment and implementation of new security technologiesAssist with dashboard creation, reporting, and security metrics developmentCompliance & Governance SupportSupport compliance initiatives aligned with NIST, CIS Controls, ISO 27001, and Roper Cybersecurity requirementsAssist with audit requests, evidence collection, and security documentationMaintain incident records, procedures, and operational runbooksSupport continuous improvement of SOC processes and proceduresRelevant Platforms (experience with several expected):CrowdStrike FalconGoogle SecOps (Chronicle)Microsoft DefenderSIEM PlatformsEndpoint Detection and Response (EDR) PlatformsSecurity Orchestration, Automation, and Response (SOAR)Minimum Qualifications:Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)2+ years of experience in cybersecurity, security operations, IT operations, or related technical fieldExperience investigating security alerts, detections, and incidentsUnderstanding of security concepts including malware, phishing, identity attacks, vulnerabilities, and network securityFamiliarity with SIEM, EDR, and security monitoring platformsStrong analytical and problem-solving skillsExcellent written and verbal communication skillsAbility to work independently and collaboratively within a team environmentPreferred Qualifications:3+ years of Security Operations Center (SOC) experienceExperience with CrowdStrike Falcon, Google SecOps, Microsoft Defender, or similar platformsExperience with incident response and digital forensics investigationsExperience with vulnerability management programsFamiliarity with MITRE ATT&CK FrameworkExperience with cloud security technologies and environmentsKnowledge of NIST Cybersecurity Framework and CIS ControlsExperience with scripting or automation (PowerShell, Python)Certifications (One or More Preferred):Security+CySA+GSECGCIHGCIACISSP (Associate or Full)SC-200SC-900CrowdStrike CertificationsGoogle SecOps CertificationsYears of Experience (IT, Security & Compliance):2–5 years of Information Technology, Cybersecurity, Security Operations, Compliance, or Incident Response experienceEducation:Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field preferredEquivalent military, technical, or professional experience will be consideredTravel Requirements: Typically requires overnight travel less than 10% of the time.Location: Duluth, GA, Tallassee, ALEqual Opportunity Employer EEO/AA M/F/Vet Disability