Sr. Cybersecurity Analyst - Detection & Response

Motiva Enterprises, LLC is seeking a Sr. Cybersecurity Analyst to join its Cybersecurity Operations team, reporting to the Cybersecurity Operations Manager. This in-office role supports detection and response activities across the organization by monitoring security signals, investigating incidents, and helping advance Motiva’s cybersecurity program through technology optimization and measurable process maturity.

Working from Motiva’s corporate headquarters in Downtown Houston, TX, the analyst will help correlate log data, identify suspicious or anomalous activity, and support vulnerability detection and remediation tracking. The position also includes on-call coverage as needed.

Key Responsibilities

• Assist in developing strategy, goals, and objectives for the cyber security program.
• Drive the program toward maturity through repeatable processes, metrics, and continuous improvement.
• Respond to and investigate cybersecurity events and incidents.
• Analyze log information to correlate security events and improve investigation outcomes.
• Detect, analyze, and track remediation of security vulnerabilities.
• Research emerging threats and help implement or lead preventive controls.
• Support, maintain, and enhance protection and detection security technologies.
• Assist in developing security metrics, providing technical analysis to inform performance and trends.
• Provide on-call support as needed.
• Resolve problems of a clearly defined nature using the best identified method of resolution.
• Provide basic advice and guidance to lower-level business support workers within the scope of assigned projects.
• Perform other duties as assigned.
• Read and abide by the company’s code of conduct, ethics statements, employee handbook(s), policies and procedures, and other corporate mandates, including participation in mandatory training programs.
• Report any real or suspected violation of the corporate compliance program, company policies and procedures, harassment, or other prohibited activities in accordance with reporting policies.
• Obtain clarification of policy whenever necessary, using resources available through Compliance, Human Resources, or Legal.
• Support and abide by the company values.

Minimum Requirements

• Associate’s or bachelor’s degree, or an equivalent combination of education and relevant work experience (with year-for-year substitution).
• At least 5 years of experience in cybersecurity operations, threat detection, incident response, security monitoring, or a related cybersecurity discipline.
• Experience monitoring enterprise IT environments and investigating security events, alerts, and incidents.
• Knowledge of security operations, incident response processes, threat intelligence, and security monitoring technologies.
• Familiarity with cybersecurity frameworks and standards, including NIST Cybersecurity Framework and CIS Controls.
• Understanding of applicable cybersecurity, privacy, and regulatory requirements, including GDPR, HIPAA, and other relevant industry standards.
• Strong analytical and critical thinking skills to identify, investigate, and respond to suspicious or anomalous activity.
• Ability to interpret complex datasets and correlate information from multiple sources for threat detection and incident investigations.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Experience with data analysis, reporting, dashboard development, and security metrics.
• Strong technical documentation, reporting, and incident tracking capabilities.
• Ability to independently manage assigned security initiatives, priorities, and projects in a fast-paced environment.
• Proficiency with Microsoft Office applications including Excel, Word, and PowerPoint.
• Strong collaboration skills with cross-functional work across IT, risk, and business teams.

Technologies and Frameworks

• NIST Cybersecurity Framework
• CIS Controls
• GDPR, HIPAA
• Microsoft Office (Excel, Word, PowerPoint)
• CompTIA Security+
• CompTIA PenTest+
• GIAC Security Essentials (GSEC)
• Systems Security Certified Practitioner (SSCP)
• Certified in Cyber (ISC2 CC)
• CySA+
• GCIA
• GCIH
• MITRE ATT&CK Framework
• SOC operations
• SIEM platforms
• Security process automation
• Python
• PowerShell
• Cyber kill chain

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field.
• Relevant cybersecurity certifications such as CompTIA Security+, CompTIA PenTest+, GIAC Security Essentials (GSEC), SSCP, ISC2 CC, CySA+, GCIA, GCIH, or similar industry-recognized credentials.
• Experience reviewing, tuning, developing, and optimizing security detections to reduce false positives and improve threat visibility.
• Working knowledge of SOC operations, SIEM platforms, and security process automation.
• Ability to script using Python and/or PowerShell.
• Experience leveraging APIs and scripting for system integration and automation.
• Familiarity with incident response methodologies, cyber kill chain concepts, and the MITRE ATT&CK Framework.

Work Authorization and Equal Opportunity

• Based in Houston, TX and classified as an in-office role at Motiva’s corporate headquarters in Downtown Houston.
• For regular U.S. positions, applicants must be authorized to work in the United States for Motiva Enterprises LLC without sponsorship (for example, TN, H-1B, or other employment-based immigration authorization or visa).
• Motiva participates in E-Verify.
• Motiva will consider qualified applicants for employment without regard to protected characteristics under federal, state, or local laws.