Security Analyst III

JOB SUMMARY

Job Profile Summary

The Security Analyst III serves as a senior technical contributor within the Enterprise Security Tools & Architecture team. This position is responsible for designing implementing administering and improving enterprise cybersecurity technologies that protect the organizations information assets identities critical infrastructure users and business operations.

The Security Analyst III provides technical leadership for enterprise security platforms identity and access management solutions cloud security capabilities threat detection technologies and cybersecurity engineering initiatives. This role leads complex projects develops automation and detection capabilities supports incident response activities and drives continuous improvement across cybersecurity operations. The Security Analyst III is expected to possess strong expertise across multiple cybersecurity domains and serve as a trusted technical resource for security operations architecture engineering and business stakeholders.

Successful candidates will demonstrate a blend of security engineering operational excellence technical leadership and architectural thinking while helping to advance the organizations security posture.

Primary Responsibilities
Security Technology Management

• Design implement administer and maintain enterprise security technologies and supporting infrastructure.

• Design implement and support security controls protecting enterprise identity cloud collaboration messaging and productivity platforms.

• Evaluate security configurations identify gaps and recommend improvements that strengthen authentication access control privileged access data protection monitoring and overall security posture across enterprise technology platforms.

• Lead technical projects involving cybersecurity tools integrations monitoring capabilities cloud services identity systems and operational improvements.

• Ensure security platforms remain reliable scalable and aligned with business requirements.

• Develop and maintain system documentation technical standards operational procedures and architecture diagrams.

• Provide advanced troubleshooting and support for cybersecurity systems and services.

• Evaluate emerging technologies and security capabilities to improve enterprise security effectiveness and operational maturity.

Detection Engineering and Security Operations

• Develop tune and maintain security detections alerts dashboards correlation logic and investigative workflows.

• Integrate security telemetry from multiple sources into enterprise monitoring and response platforms.

• Support incident response efforts through investigation containment remediation and post-incident analysis.

• Identify opportunities for automation and process improvement that improve security operations efficiency and resiliency.

• Participate in threat hunting detection engineering purple team activities and continuous improvement initiatives.

• Collaborate with internal stakeholders to improve visibility detection coverage response effectiveness and operational metrics.

Technical Leadership

• Serve as a subject matter expert for assigned security technologies and functional areas.

• Mentor junior analysts and provide technical guidance during investigations projects and operational activities.

• Participate in architecture reviews technology evaluations risk assessments and strategic planning initiatives.

• Lead technical projects and influence cybersecurity decisions through sound engineering and architectural recommendations.

• Promote best practices related to security engineering monitoring automation platform administration and operational excellence.

Required Qualifications

• Bachelors degree in Cybersecurity Information Technology Computer Science Engineering or a related field; or equivalent combination of education and experience.

• Demonstrated experience administering and supporting enterprise cybersecurity technologies.

• Experience supporting security monitoring incident response threat detection and security operations activities.

• Experience with scripting automation or software development technologies such as PowerShell Python or similar languages.

• Strong understanding of cybersecurity principles risk management concepts and industry best practices.

• Experience working within enterprise-scale infrastructure cloud services and hybrid environments.

• Strong analytical troubleshooting documentation communication and problem-solving skills.

Preferred Qualifications

• Experience with SIEM SOAR security analytics or detection engineering platforms.

• Experience securing enterprise cloud identity collaboration or productivity platforms within a regulated or large-scale enterprise environment.

• Experience with identity and access management authentication technologies privileged access controls governance or related security disciplines.

• Experience integrating cloud and enterprise security telemetry into monitoring detection and incident response programs.

• Experience leading technical projects platform deployments or cybersecurity improvement initiatives.

• Relevant certifications such as CISSP CCSP GIAC cloud-security security engineering or other cybersecurity certifications.

Expectations of a Security Analyst III

A Security Analyst III is expected to operate independently while leading complex technical initiatives and solving difficult cybersecurity challenges. Individuals at this level demonstrate deep technical expertise strong ownership sound judgment and the ability to influence outcomes across teams and disciplines.

Successful candidates will:

• Lead projects with minimal oversight.

• Drive meaningful improvements to security capabilities and operational processes.

• Demonstrate expertise across multiple cybersecurity domains.

• Mentor and develop less experienced team members.

• Balance tactical execution with strategic thinking.

• Translate business requirements and security objectives into practical scalable solutions.

• Continuously learn and adapt to emerging threats technologies and business needs.

Knowledge Skills and Abilities

• Knowledge of: IT infrastructure environments local and wide-area networks and application security needs

• Ability to: manage small to medium information security projects

• Ability to: develop consensus and facilitate decision-making among senior executives

• Ability to: communicate and/or exchange information; conduct oral presentations

Licenses and Certifications

• CISSP Certified Information Systems Security Professional preferred

• Certified Information Security Manager (CISM) preferred

• Certified Information Systems Auditor (CISA) preferred

• Certified Secure Software Lifecycle Professional (CSSLP) preferred

• Certified Information Privacy Professional (CIPP) preferred

Strength Factor Rating - Physical Demands/Requirements

• Sedentary Work - Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift carry push pull or otherwise move objects including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Strength Factor Description - Physical Demands/Requirements

• Standing: Remaining on ones feet in an upright position at a work station without moving about (Occasionally)

• Walking: Moving about on foot (Frequently)

• Sitting: Remaining in a seated position (Constantly)

• Lifting: Raising or lowering an object from one level to another (includes upward pulling) (Occasionally)

• Carrying: Transporting an object usually holding it in the hands or arms or on the shoulder (Occasionally)

• Pushing: Exerting force upon an object so that the object moves away from the force (Occasionally)

• Pulling: Exerting force upon an object so that the object moves toward the force (includes jerking) (Occasionally)

• Climbing: Ladders Stairs (Occasionally)

• Balancing: Maintaining body equilibrium to prevent falling (Occasionally)

• Stooping: Bending the body downward and forward by bending the spine at the waist (Occasionally)

• Kneeling: Bending the legs at the knees to come to rest on the knee or knees (Occasionally)

• Crouching: Bending the body downward and forward by bending the legs and spine (Occasionally)

• Crawling: Moving about on the hands and arms in any direction (Occasionally)

• Reaching: Extending hands and arms in any direction (Constantly)

• Handling: Seizing holding grasping turning or otherwise working with the hand or hands (Manual Dexterity) (Constantly)

• Fingering: Picking pinching or otherwise working with the fingers primarily (Finger Dexterity) (Constantly)

• Feeling: Perceiving such attributes of objects/materials as size shape temperature texture movement or pulsation by receptors in the skin particularly those of the finger tips (Constantly)

• Talking: Expressing or exchanging ideas/information by means of the spoken word (Frequently)

• Hearing: Perceiving the nature of sound by the ear (Frequently)

• Tasting/Smelling: (Occasionally)

• Near Vision: Clarity of vision at 20 inches or less (Constantly)

• Far Vision: Clarity of vision at 20 feet for more (Frequently)

• Depth Perception: Three-dimensional vision; ability to judge distances and spatial relationships so as to see objects where and as they actually are (Frequently)

• Vision: Color - The ability to identify and distinguish colors (Constantly)

Working Conditions/Environment

• Employee is subject to inside environmental conditions

Working Conditions

• Well lighted climate controlled areas (Constantly)

• Frequent repetitive motion (Constantly)

• CRT (Computer Monitor(s)) (Constantly)

Travel

• Travel in and around plant and office facilities and around job sites out-of-doors.

Driving

• Based on assigned tasks employee may be assigned a company vehicle requiring the applicable drivers license

ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race color sex pregnancy sexual orientation age religion creed national origin gender identity disability military/veteran status genetic information or any other categories protected by applicable law.

The job description is not intended to be a complete list of all responsibilities duties or skills required for the job and is subject to review and change at any time with or without notice in accordance with the needs of ONEOK.

ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations upon request for individuals to participate in the application and hiring process. To request an accommodation email or call 1-.

Expected Salary Range