Neptune Technology Group Inc. is a technology company serving water utilities across North America. Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service. With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water .
For additional information, please visit the company website at www.neptunetg.com .
As a Security Analyst within Neptune's Security Operations Center (SOC), you will be responsible for monitoring, investigating, and responding to cybersecurity threats across Neptune's enterprise environment. You will investigate escalated alerts and detections, support incident response activities, coordinate with IT Operations and Engineering teams, and assist with the administration, configuration, and tuning of security tools.
The Security Analyst plays a critical role in protecting Neptune's systems, users, data, and business operations by identifying, containing, and mitigating cyber threats while supporting the continuous improvement of Neptune's security monitoring and response capabilities.
- Monitor security events, alerts, and detections across Neptune's security platforms
- Investigate escalated alerts and suspicious activity identified through security monitoring tools
- Analyze security events to determine legitimacy, impact, and required response actions
- Identify indicators of compromise, malicious activity, and emerging threats
- Perform threat hunting activities to proactively identify potential security risks
- Monitor security dashboards and ensure timely response to security events
- Participate in cybersecurity incident response activities, including investigation, containment, eradication, and recovery
- Collect and analyze forensic artifacts, logs, and endpoint telemetry during investigations
- Escalate incidents appropriately based on severity and impact
- Coordinate with IT Operations, Infrastructure, Engineering, and Application teams during investigations and remediation activities
- Support vulnerability management efforts by identifying and tracking remediation activities
- Assist with security reviews of systems, applications, and infrastructure
- Participate in security projects and operational initiatives
- Support security awareness and operational readiness efforts
- Collaborate with Neptune's MSSP and third-party security partners during investigations
- Support the configuration, administration, maintenance, and tuning of security tools
- Assist with detection rule creation, tuning, and optimization
- Validate security telemetry and log ingestion across monitoring platforms
- Participate in the deployment and implementation of new security technologies
- Assist with dashboard creation, reporting, and security metrics development
- Support compliance initiatives aligned with NIST, CIS Controls, ISO 27001, and Roper Cybersecurity requirements
- Assist with audit requests, evidence collection, and security documentation
- Maintain incident records, procedures, and operational runbooks
- Support continuous improvement of SOC processes and procedures
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
- 2+ years of experience in cybersecurity, security operations, IT operations, or related technical field
- Experience investigating security alerts, detections, and incidents
- Understanding of security concepts including malware, phishing, identity attacks, vulnerabilities, and network security
- Familiarity with SIEM, EDR, and security monitoring platforms
- Ability to work independently and collaboratively within a team environment
- Experience with CrowdStrike Falcon, Google SecOps, Microsoft Defender, or similar platforms
- Experience with incident response and digital forensics investigations
- Experience with cloud security technologies and environments
- Knowledge of NIST Cybersecurity Framework and CIS Controls
- Experience with scripting or automation (PowerShell, Python)
- 2–5 years of Information Technology, Cybersecurity, Security Operations, Compliance, or Incident Response experience
- Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field preferred
- Equivalent military, technical, or professional experience will be considered
Requirements: Typically requires overnight travel less than 10% of the time.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.