Apply on Employer Site

Chord Energy · 4 months ago

Senior Cybersecurity Analyst

Houston, TX - Corporate

Full-time

Onsite

Senior Level, Lead/Staff

8+ years exp

Chord Energy is a company focused on enhancing its cybersecurity posture, and they are seeking a Senior Cybersecurity Analyst to lead complex security initiatives and conduct in-depth threat analysis. The role involves collaboration with cross-functional teams to implement advanced security controls and ensure compliance with industry standards.

Oil and GasWholesale

Responsibilities

Lead advanced threat detection, analysis, and response efforts across corporate, SCADA, mobile, and cloud environments

Serve as a technical escalation point for complex security incidents and investigations

Conduct proactive threat hunting and develop detection use cases in collaboration with SOC partners

Develop and refine security playbooks, incident response procedures, and forensic analysis workflows

Collaborate with IT teams to integrate security into infrastructure and application designs

Evaluate and recommend advanced security tools and technologies; contribute to budget planning

Lead risk assessments and penetration testing efforts, identifying vulnerabilities across environments and coordinating remediation in alignment with industry standards

Assess and coordinate risk of third-party technologies as they relate to Company IT systems and data (Software-as-a-Service, Infrastructure-as-a-Services, consulting, new software and hardware solutions, etc.)

Develop and maintain security metrics and dashboards for executive reporting and continuous improvement

Support compliance efforts by aligning controls with SOX, NIST, and other regulatory frameworks

Mentor junior analysts and contribute to knowledge sharing within the security team

Facilitate collaborative security simulations and tabletop exercises designed to validate incident response, remediation, and recovery capabilities across IT systems and data environments

Drive automation and orchestration of security operations, leveraging tools like SOAR, SIEM, and AI/ML-based threat detection

Maintain and enhance endpoint, network, and cloud security configurations and monitoring

Assist in the development and enforcement of security policies, standards, and procedures

Lead the company’s security awareness and training program, providing guidance to business units and conducting remedial education on secure practices as needed

Ability to work in a fast-paced and fluid environment; flexible with the demands of a growing company

On call rotation

Qualification

Cybersecurity operationsCloud securityIncident responseVulnerability managementSecurity technologiesScripting/automationRegulatory frameworksAnalytical skillsCommunication skillsDocumentation skillsProject leadershipMentoring

Required

Bachelor's Degree in Information Security, Computer Science, or related field (or equivalent experience)

8+ years of progressive experience in cybersecurity operations, including hands-on threat detection, incident response, vulnerability management, and security monitoring

Proven experience with cloud security (AWS, Azure, GCP), SCADA/IOT environments, and hybrid infrastructure

Demonstrated experience conducting incident postmortems and root cause analysis for significant security events, with the ability to document findings and drive improvements

Strong knowledge of security technologies (SIEM, IDS/IPS, IAM, PKI, DLP, etc.)

Demonstrated experience with enterprise-grade security platforms such as CrowdStrike Falcon and Microsoft Defender for Endpoint/Sentinel

Extensive experience working with managed detection and response (MDR) services like Arctic Wolf, including working with external SOC teams and interpreting threat intelligence reports

Solid understanding of regulatory frameworks (SOX, NIST, CIS, etc.)

Proficient in scripting or automation (e.g., PowerShell, Python) for security operations

Strong knowledge of network architecture, firewalls, IDS/IPS, and secure coding practices

Strong analytical, communication, and documentation skills

Project leadership experience on security initiatives