Security Analyst I

Join our growing team and discover why Summit Utilities, Inc. continues to earn national and regional recognition as an employer of choice. Our recognitions include Best Places to Work in Maine (2019–2025); Best Places to Work in Arkansas (2020, 2023, 2025); Best Places to Work in Oklahoma (2022–2025); Best Places to Work in Missouri (2023 and 2026); Best Places to Work in Colorado (2025); Forbes America’s Best Small Employers (2023); and, most recently, Proud and Purposeful Employer (2026). Summit is a growing natural gas utility providing safe, reliable, and clean burning natural gas service to homes and businesses in Arkansas, Colorado, Maine, Missouri, Oklahoma, and Texas. Being part of the Summit team means embracing excellence and innovation, committing to safety each and every day, and doing all that we can to serve each other, our customers, and the communities where we live. We aim to bring warmth and energy to everything we do. We have an exciting opportunity for a Security Analyst I (SGL15). This hybrid position may be based in our Little Rock, Fort Smith, or Fayetteville, Arkansas offices. POSITION SUMMARY The Security Analyst I protects Summit Utilities' business systems, operational technology (OT), and data by monitoring for threats, investigating and responding to security events, and owning assigned security control areas from start to finish. This role works across both the corporate IT environment and the Industrial Control Systems (ICS) and SCADA environment that supports Summit's natural gas distribution system, partnering closely with IT, SCADA, and Gas Control teams to keep operations safe, reliable, and secure. Reporting to the Director of Information Security, the Information Security Analyst is an independent contributor who leads Tier-2 investigations, tunes detections, drives vulnerability remediation with system owners, and prepares evidence for audits and assessments aligned to the TSA Pipeline Security Directives, C2M2, NIST CSF, and NERC CIP. The role also helps build a strong security culture through awareness training, interactive exercises, and clear communication with employees at every level of the organization. PRIMARY DUTIES AND RESPONSIBILITIES Monitor security alerts and log data across IT and OT environments; investigate suspicious activity and respond to Tier-2 security events from triage through resolution. Document, classify, and track security events and incidents; draft incident reports and escalate major incidents, and any event affecting OT operations, according to the incident response plan. Write and tune detection queries and correlation rules to improve alert quality and reduce false positives. Perform forensic analysis and evidence collection on suspicious devices; conduct legal hold actions and investigations when required. Apply threat intelligence from sources such as CISA and the DNG-ISAC to investigations and detections, mapping activity to MITRE ATT&CK for Enterprise and ICS. Coordinate with SCADA Analysts, SCADA Technicians, and Gas Controllers on OT alerts and response, following a safety-first, approval-required approach for any response action in OT environments. Review OT network monitoring alerts and support security visibility of control systems, including Remote Terminal Units (RTU), Programmable Logic Controllers (PLC), and field communication technologies. Support hardening, configuration, and testing of security updates for IT and OT systems and servers, aligned to operational change windows and high-availability requirements. Run and review vulnerability scans; prioritize findings by risk and asset criticality and partner with IT and OT system owners to remediate and track items to closure. Review Common Vulnerabilities and Exposures (CVE) and vendor advisories for exposure in IT and OT assets and recommend mitigations or compensating controls. Coordinate third-party vulnerability assessments and penetration tests and help develop remediation plans based on the findings. Conduct security reviews of applications, systems, and integrations before they go live. Manage MFA, SSO, and group policy security configurations and run periodic user and privileged access review cycles. Prepare control evidence and support control testing for TSA Security Directive alignment, the C2M2 self-assessment, NERC CIP-aligned controls, and internal and external audits. Maintain accurate, current documentation for security systems, procedures, and OT security components. Participate in tabletop exercises, disaster recovery, and business continuity planning, including scenarios that cross IT and OT. Deliver security awareness content and interactive exercises such as phishing simulations, track completion, and effectiveness for all team members. Help develop, communicate, and keep current information security policies, standards, and procedures. Help newer analysts onboard and pair with them on investigations. Serve as a primary member of the security on-call rotation. EDUCATION AND WORK EXPERIENCE Bachelor's degree in Cybersecurity, Computer Science, Computer Information Systems, Information Technology, or a closely related field. Equivalent experience, including OT Security industry experience, may be considered in lieu of a degree. 2-5 years of experience in security operations or a related IT role; exposure to OT/ICS security is strongly preferred. Experience with SCADA or control system operations or communications in the natural gas, pipeline, or power industry is preferred. Professional certifications preferred: CompTIA Security+, CySA+, GIAC GCIH, or GSEC. Global Industrial Cyber Security Professional (GICSP) is a plus. KNOWLEDGE, SKILLS, ABILITIES Solid knowledge of information security principles and best practices, networking design and protocols, and cryptographic communication and storage protocols. Proficiency with log and event analysis, including writing SIEM queries and correlation rules and investigating across multiple data sources. Experience with packet capture analysis, investigation protocols, and discovery techniques. Working knowledge of endpoint detection and response (EDR), next-generation firewall, and proxy security controls, including configuration and tuning. Experience with vulnerability scanning, penetration testing and mapping tools, and system hardening. Working knowledge of OT assets and industrial protocols (e.g., Modbus, DNP3, EtherNet/IP, OPC), the Purdue model, and how safety and availability priorities in OT differ from IT. Familiarity with security and governance frameworks such as NIST CSF, NIST SP 800-82, ISA/IEC 62443, C2M2, TSA Pipeline Security Directives, NERC CIP, and CIS Controls. Understanding of identity and access management concepts, including MFA, SSO, least privilege, and privileged access. Working knowledge of cloud security controls, logging, and the shared responsibility model. Scripting ability in PowerShell or Python is a plus. Decisive, with sound judgment under pressure and a clear sense of when to escalate. Strong written and verbal communication skills, with the ability to explain security requirements and risks to everyone from field personnel to leadership. Collaborative partner across IT, OT, and business teams; able to manage multiple priorities and meet deadlines. The above statements are intended to describe the general nature and level of work being performed by employees assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and/or skills required of all personnel so classified. Summit offers competitive pay and medical/dental/vision and other benefits that provide flexibility, choice, and support to our employees when they need it most. We understand that home and family are essential pieces of your life, and our benefits are designed to support you both at work and at home. Summit Utilities, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or protected veteran status and will not be discriminated against on the basis of disability or veteran status.