Sr. Cybersecurity Analyst - Detection & Response

At Motiva, our employees' energy, passion, and dedication to excellence are what make us who we are and what allows us to generate energy that makes a house a home, gets us from point A to point B, and enables our health and wellbeing. We invest in every aspect of our employees' lives because, at Motiva, our people matter. Headquartered in Houston, Texas, Motiva refines, distributes and markets petroleum products throughout the Americas. The company's Port Arthur Manufacturing Complex in Port Arthur, TX, is comprised of North America's largest refinery with a total throughput of 720,000 barrels per day, the world's second largest base oil plant, and an integrated chemical plant. Under exclusive long-term brand licenses with Shell and Phillips 66 (for the 76® brand), Motiva's commercial operations supply more than 12 billion gallons of fuel to customers annually. Motiva is wholly owned by Aramco, one of the world's largest integrated energy and chemicals companies. Position Overview: We are seeking a highly skilled and motivated Sr. Cybersecurity Analyst - Detection & Response to join our Cybersecurity Operations team. Reporting directly to the Cybersecurity Operations Manager, this role is responsible for helping safeguard the organization's information assets and supporting the continued advancement of our Cybersecurity Framework. In this role, you will contribute to the enhancement of the cybersecurity program through security monitoring, incident detection and response, vulnerability management, threat intelligence, and the deployment and optimization of security technologies. The Sr. Cybersecurity Analyst will play a key role in identifying, analyzing, and responding to cyber threats while helping strengthen the organization's overall security posture. Success in this role requires the ability to thrive in a fast-paced, evolving environment and effectively align cybersecurity practices with business objectives. The ideal candidate brings strong technical expertise, analytical thinking, and communication skills, along with the ability to collaborate across teams, influence stakeholders, and drive meaningful security improvements throughout the organization. The successful candidate will work closely with cross-functional teams and business stakeholders to support enterprise cybersecurity initiatives and help advance the organization's security capabilities. This position is based at Motiva's corporate headquarters in Downtown Houston, Texas, and is an in-office role. Responsibilities: Assist in development of strategy, goals, and objectives for the cyber security program.Drive program towards maturity. (Repeatable processes, metrics etc.)Respond and investigate cybersecurity events and incidents.Analyzes log information to correlate security events.Detect, analyze, and track the remediation of security vulnerabilities.Research emerging threats and implement or lead the implementation of preventive controls.Support, maintain and enhance protection and detection security technologies.Assist in development of security metrics and provides technical analysis that gives insight into performance and trendsIs On-Call as neededResolves problems that are of a clearly defined nature and easily identifiable as to the best method of resolutionTasks to be performed are at the most basic level of professional individual contributionMay provide basic advice and guidance to lower level business support workers within the scope of a project they are also assigned toOther duties as assignedReads and abides by the company's code of conduct, ethics statements, employee handbook(s), policies and procedures and other corporate mandates, including participation in mandatory training programsReports any real or suspected violation of the corporate compliance program, company policies and procedures, harassment, or other prohibited activities in accordance with the reporting policies of the companyObtains clarification of policy whenever necessary and may use the resources available through the Compliance, Human Resources or Legal Department to do soSupport and abide by the values of the company Experience and Qualifications: Required Education and Experience: Associate's degree, bachelor's degree, or an equivalent combination of education, and relevant work experience. Relevant professional experience may be substituted for the education requirement on a year-for-year basis.Minimum of 5 years of experience in cybersecurity operations, threat detection, incident response, security monitoring, or a related cybersecurity discipline.Experience monitoring enterprise IT environments and investigating security events, alerts, and incidents.Knowledge of security operations, incident response processes, threat intelligence, and security monitoring technologies.Familiarity with cybersecurity frameworks and standards, including the NIST Cybersecurity Framework and CIS Controls.Understanding of applicable cybersecurity, privacy, and regulatory requirements, including GDPR, HIPAA, and other relevant industry standards.Strong analytical and critical thinking skills with the ability to identify, investigate, and respond to suspicious or anomalous activity.Ability to interpret complex datasets and correlate information from multiple sources to support threat detection and incident investigations.Strong written and verbal communication skills, with the ability to effectively communicate technical concepts to both technical and non-technical audiences.Experience with data analysis, reporting, dashboard development, and security metrics.Strong technical documentation, reporting, and incident tracking capabilities.Ability to independently manage assigned security initiatives, priorities, and projects in a fast-paced environment.Proficiency with Microsoft Office applications, including Excel, Word, and PowerPoint.Strong collaborative instincts and experience working cross‑functionally with IT, risk, and business teams. Preferred Education and Experience: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.Relevant cybersecurity certifications such as CompTIA Security+, CompTIA PenTest+, GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), Certified in Cyber (ISC2 CC), CySA+, GCIA, GCIH, or similar industry-recognized credentials.Experience reviewing, tuning, developing, and optimizing security detections to reduce false positives and improve threat visibility.Working knowledge of SOC operations, SIEM platforms, and security process automation.Ability to script using Python and/or PowerShell.Experience leveraging APIs and scripting for system integration and automation.Familiarity with incident response methodologies, cyber kill chain concepts, and the MITRE ATT&CK Framework. Desired Skills and Experience * At least 5 years of experience in cybersecurity operations, incident response, threat detection, security monitoring, or a related discipline * Experience monitoring enterprise IT environments * Experience investigating security alerts, events, and incidents * Ability to analyze logs and correlate data from multiple sources * Experience identifying, analyzing, and tracking vulnerabilities through remediation * Experience managing security initiatives in a fast-paced environment * Availability to participate in an on-call rotation as needed * Security Operations Center, or SOC, operations * Security Information and Event Management, or SIEM * Incident detection and response * Security event and log analysis * Threat intelligence and threat research * Vulnerability management * Security monitoring technologies * Detection engineering and optimization * Security metrics, dashboards, and reporting * Incident tracking and technical documentation * NIST Cybersecurity Framework * CIS Controls * Data analysis and event correlation * Microsoft Excel, Word, and PowerPoint * Analytical and critical thinking * Clear technical and non-technical communication * Cross-functional collaboration * Stakeholder influence * Independent project management * Prioritization * Technical writing and documentation * Ability to connect cybersecurity practices with business objectives