Cybersecurity Analyst

SOLV Energy is an engineering, procurement, construction (EPC) and solar services provider for utility solar, high voltage substation and energy storage markets across North America.

Job Description Summary:
The core responsibility of the Cybersecurity Analyst is to perform triage, analysis and investigations in response to security alerts and vulnerabilities, which includes proactive analysis, digital forensics and data analytics.

This position will also be responsible for building capabilities that close information gaps, strengthen our defenses and defend company resources from emerging threats.

Job Description:



*This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned

Position Responsibilities and Duties:


* Evaluate, document, and respond to recommendations or alerts from internal security tools and Managed Security Services Provider


* Monitor and analyze security logs and alerts to proactively detect, respond, and assist other IT team members with potential security incidents


* Conduct regular security assessments and audits to identify vulnerabilities and recommend/take action on appropriate remediation measures


* Collaborate with cross-functional teams to develop and implement comprehensive cybersecurity strategies, policies, and procedures


* Act as part of the SecOps team and ensure continuous compliance with all security requirements


* Proactively identify gaps or conflicts in existing processes and help develop and suggest solutions


* Provide guidance and recommendations on the secure deployment of new technologies and systems within the organization


* Assist with other security aspects, including vendor security assessments and audit needs


* Assist with the education and training of process/control owners to better understand technology control frameworks and their responsibilities


* Generate regular reports and technical documentation for the SecOps team


* Support cross company incidents and crisis


* Review detections for tuning opportunities


* Contribute to the development and maintenance of incident response plans and business continuity strategies

Minimum Skills or Experience Requirements:



* Bachelor's degree in Information Technology, Information Security, Cybersecurity or related field and/or equivalent experience


* 3+ years of progressively more responsibility in directly related work


* Two or more years of experience in utilizing enterprise security solutions including but not limited to SIEM, security detection and response tools, and endpoint security products


* Excellent knowledge of Microsoft M365 Defender including incident response, threat hunting and vulnerability management


* Experience in developing and updating Incident Response plans and runbooks


* Familiarity with common network, system and web application attacks and mitigations...