Network Security Analyst Jobs

• Reimbursement for Gym Membership
• Employee Discount Programs
• On-site Cafeteria (select locations)
• 9/80 Work Schedule Option (where applicable)
• Annual Vacation Incentive (40-120 hours of additional pay) for Eligible Employees
• Dependent Children Scholarships
• Educational Assistance Plan
• Company-Paid Life Insurance for Active Employees
• Remote Work options available for eligible positions
• Pension Plan
• Service Awards Program
• Company-Paid Holidays
• Medical, Dental, & Vision Plans; FSA and HSA options
• Parental Leave
• Company-Paid Sick Leave and Long-Term Disability
• Excellent 401(k) Match
• On-site Fitness Center (select locations)
• Healthy Rewards Program
• Paid Vacation Time
• On-site Health Clinic
• Options are department and/or location specific
• On-site Credit Union and ATM (Corporate office only)

PLEASE NOTE ALL JOBS DO NOT QUALIFY FOR ALL PERKS

Relocation Benefits are not available for this position.

Employer will not sponsor visas for position

Participate in the operation of the information security scheme related to network security, which includes design, implementation and administration of technical cybersecurity defenses for firewalling, segmentation, network intrusion detection and prevention, network access monitoring and control, network vulnerability scanning, penetration testing, etc. Also, the analyst is an important part in the process of reviewing and executing the incident response process, and performing digital forensics investigations. Participate in team planning activities; occasionally assume responsibility for planning security assessments, evaluations, and projects. Analyst needs to possess knowledge and experience in area of responsibility. Capable of solving a set of security related problems with minimum assistance; contract vendors occasionally. Job requires carrying a pager and/or cell phone and take part on an on-call schedule.

Degree / The minimun number of years of job related experience required by this job is:

• College Degree (Bachelors Level) in Computer Sciences, Telecommunications, Management, Networking or related field.

The minimun number of years of job related experience required by this job is:

• 3 years.

List Any Specialized Training Or Unique Skills Required

• Analyze technological advances with existing product lines and emerging technologies, against the requirements of the company and the information asset owner, to ensure the appropriate policies, procedures, hardware and software controls are selected to provide effective protection over an extended period of time. Ensure compatibility within the entire CITGO security scheme and integrate with minimal impact to end users of information asset systems.
• Participate in the design, implementation and maintenance of network technology services for ensuring the confidentiality, integrity and availability of CITGO information assets at Houston and remote sites, including process control networks, and hosts of CITGO information in the “cloud”. By enforcing zoning and firewalling among different areas of the network with different security requirements. Deploy and administrate network access control lists, firewall rulesets, Virtual Private Networks (VPN), Network Access Control (NAC), etc.
• Provide day to day administration and maintenance of intrusion detection and prevention systems, dedicated to detect known form of attacks and policy violations, as well as anomalies. These systems include the administration of: Network intrusion detection and prevention (IDS and IPS), Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), Antivirus and Advanced Malware Protection (AMP) systems.
• Conduct security assessments to determine areas of vulnerability to CITGO information assets; this process includes determining information asset owner's acceptable level of risk and recommending controls such as policies, procedures, and technology to mitigate vulnerabilities while decreasing risk down to acceptable levels. Implement the department’s vulnerability scanning program, work with IT department to ensure controls, including patching, are implemented timely and with minimal impact to the business operations.
• Experience on network security (network firewall, VPN, SIEM, URL Filtering and web content filtering), preferred.
• Administration and maintenance of the department’s capability for real-time alerting and digital forensics. Enable sources of security events to produce and forward logs to the Security Information and Event Management (SIEM) tool; ensure the SIEM tool gathers and correlate events to provide the necessary real-time alerting for CITGO Incident Response (IR) capability. Prioritize alerts based on severity and target’s criticality, determine and tune out false positives, and add detection to minimize false negatives.
• Review, test and be part of in the Incident Response (IR) process, by periodical review and testing of the procedure. Also participate in investigating alerts, helping confirm incidents, and be part of response team. Contribute in the lesson learned phase of the incident response process by helping fine tune the detection capability.
• Security certified professional (CISSP), preferred.
• Experience with Cisco Security Suite (Cisco-ASA, Firepower FTD, FMC, AMP, ISE), preferred.
• Cisco certified (CNNP), preferred.

Requisition #: 2023-7039

External Company Name: Citgo Petroleum Corporation

External Company URL: http://citgo.com/Home.jsp

Our Favorite CITGO Perks are::

• On-site Credit Union and ATM (Corporate office only)
• Reimbursement for Gym Membership
• Employee Discount Programs
• Remote Work options available for eligible positions
• On-site Fitness Center (select locations) PLEASE NOTE ALL JOBS DO NOT QUALIFY FOR ALL PERKS
• Pension Plan
• Paid Vacation Time
• Medical, Dental, & Vision Plans; FSA and HSA options
• Company-Paid Sick Leave and Long-Term Disability
• Annual Vacation Incentive (40-120 hours of additional pay) for Eligible Employees
• 9/80 Work Schedule Option (where applicable)
• Dependent Children Scholarships
• Parental Leave
• Service Awards Program
• Healthy Rewards Program
• Options are department and/or location specific
• Company-Paid Holidays
• On-site Health Clinic
• Educational Assistance Plan
• Company-Paid Life Insurance for Active Employees
• On-site Cafeteria (select locations)
• Excellent 401(k) Match