Cyber Security Analyst

Primoris Renewable Energy is seeking a Cybersecurity Analyst to join the Security Operations Center (SOC). This role focuses on monitoring, detecting, investigating, and responding to cybersecurity threats across enterprise infrastructure, cloud environments, and critical business systems.

Responsibilities

• Security Monitoring & Threat Detection
  • Monitor enterprise security tools and alerts for suspicious activity, malicious behavior, or policy violations.
  • Analyze and triage security events from:
    • SIEM platforms
    • Endpoint Detection & Response (EDR)
    • Email security platforms
    • Network monitoring tools
    • Identity and access monitoring solutions
    • Cloud security platforms
  • Investigate indicators of compromise (IOCs), anomalous behaviors, and suspicious user activity.
  • Correlate logs and events across multiple security systems to identify threats.
  • Escalate high-risk incidents according to playbooks and incident severity classifications.
• Incident Response
  • Participate in cybersecurity incident response activities including detection, triage, containment, eradication, recovery, and post-incident review.
  • Investigate phishing, malware, ransomware, account compromise, insider threats, and unauthorized access incidents.
  • Document incident findings, root cause analysis, and remediation recommendations.
  • Support after-hours cybersecurity response activities when necessary.
• Endpoint, Identity & Network Security
  • Monitor endpoint security posture and investigate endpoint-related threats.
  • Analyze authentication anomalies including:
    • Privileged account misuse
    • Impossible travel
    • MFA anomalies
    • Suspicious logins
    • Excessive failed authentication attempts
  • Support Zero Trust security initiatives through continuous monitoring of identity, device, and access risks.
  • Investigate unusual network behavior and lateral movement attempts.
• Cloud Security Monitoring
  • Monitor cloud security events across Microsoft 365, Azure, SaaS platforms, and enterprise cloud services.
  • Investigate risky cloud behaviors, privilege escalation, abnormal sharing, and unauthorized access attempts.
  • Assist with remediation of cloud security findings and misconfigurations.
• Vulnerability & Exposure Management Support
  • Review vulnerability scan results and assist with prioritization of remediation activities.
  • Validate remediation of critical vulnerabilities.
  • Monitor exposure trends and recurring weaknesses affecting enterprise systems.
• Security Automation & Continuous Improvement
  • Assist in developing playbooks and incident response procedures.
  • Support SOAR workflows and automation initiatives.
  • Identify opportunities to improve detection coverage and operational efficiencies.
  • Contribute to lessons learned and continuous improvement activities.

Requirements

• 5+ years of Cybersecurity experience required.
• CrowdStrike Falcon experience required.
• Security Monitoring & Detection:
  • SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, or similar.
  • EDR/XDR solutions such as Microsoft Defender for Endpoint or comparable platforms.
  • Security log analysis and event correlation.
• Identity & Access Security:
  • Identity monitoring in environments such as Microsoft Entra ID or Active Directory.
  • Privileged Access Management systems.
  • Authentication threat analysis.
• Network & Cloud Security:
  • Firewall, DNS, proxy, and network telemetry analysis.
  • Experience with Zscaler and Microsoft security ecosystem.
  • Cloud security monitoring tools.
  • Familiarity with SaaS and remote-access security models.
• Automation & Response:
  • Experience with scripting (PowerShell, Python, or Bash preferred).
  • Familiarity with SOAR and security automation.

Preferred Qualifications

• CompTIA Security+
• CompTIA CySA+
• GCIH
• AZ-500
• CISSP (preferred for senior analyst level)

Pay

$110,000 - $120,000 per year (full-time schedule).

Benefits

• 401k with employer match
• Health, dental, and vision insurance plans
• Paid time off
• 10 paid holidays
• Stock purchase plan

Primoris Services Corporation is a premier specialty contractor providing critical infrastructure services to the utility, energy, and renewables markets throughout the United States and Canada.