Security Analyst

• Serve as a senior hands-on technical resource for the enterprise Vulnerability Management program
• Identify, validate, prioritize, track, remediate, and close enterprise vulnerabilities
• Administer, maintain, optimize, and support Wiz, CrowdStrike, Rapid7, Nagomi, and related platforms
• Perform vulnerability assessments across servers, workstations, network devices, cloud-hosted assets, applications, and other technology assets
• Analyze and validate findings to reduce false positives and focus remediation on legitimate cybersecurity risk
• Prioritize vulnerabilities based on severity, exploitation, internet accessibility, asset criticality, business impact, threat intelligence, exploitability, compensating controls, and exposure paths
• Coordinate with Infrastructure, Network, Cloud, Application, Identity, GRC, and other technology teams to drive remediation
• Track vulnerabilities through identification, validation, remediation, mitigation, exception, risk acceptance, and closure
• Perform technical validation after remediation
• Identify recurring vulnerabilities and systemic weaknesses and recommend improvements
• Develop and maintain procedures, standards, runbooks, dashboards, documentation, and reporting
• Support vulnerability exception and risk acceptance processes
• Perform vulnerability trend analysis and develop exposure metrics
• Support Nagomi integrations, exposure analysis, security control validation, and risk-based prioritization
• Support mergers, acquisitions, divestitures, and business integrations through discovery, assessment, onboarding, and integration activities
• Assess acquired environments for vulnerabilities, unmanaged assets, unsupported technologies, configuration weaknesses, and technical debt
• Establish vulnerability and exposure baselines for acquired environments
• Onboard acquired assets into enterprise Vulnerability Management processes and technologies
• Perform scans, technical assessments, validation, and follow-up testing during acquisition integration
• Provide remediation recommendations and validate patches, configuration changes, mitigations, and corrective actions
• Track M&A cybersecurity findings and activities through completion
• Support automation, API integrations, reporting, and workflow improvements
• Report to the Cyber Security Operations Manager and receive technical direction from cybersecurity leadership

Senior Cyber Security Analyst – Vulnerability Management

• Serve as a senior hands-on technical resource for the enterprise Vulnerability Management program
• Identify, validate, prioritize, track, and drive remediation and closure of vulnerabilities
• Administer, maintain, optimize, and support Wiz, CrowdStrike, Rapid7, Nagomi, and related platforms
• Perform vulnerability assessments across servers, workstations, network devices, cloud-hosted assets, applications, and other technology assets
• Analyze findings, reduce false positives, assess exposure, and prioritize risk-based remediation
• Coordinate with Infrastructure, Network, Cloud, Application, Identity, GRC, and other technology teams
• Track vulnerability lifecycles, exceptions, risk acceptance, mitigation, and closure
• Validate remediation, patches, configuration changes, and other corrective actions
• Develop procedures, standards, runbooks, dashboards, metrics, reporting, and operational documentation
• Support Nagomi integrations, exposure analysis, security control validation, and risk-based prioritization
• Support cybersecurity activities for mergers, acquisitions, and business integrations
• Assess acquired environments, identify vulnerabilities and cybersecurity gaps, establish exposure baselines, and onboard assets into enterprise security processes
• Perform M&A discovery, vulnerability scans, technical assessments, validation, follow-up testing, and remediation tracking
• Support automation, API integrations, reporting, and workflow improvements
• Report to the Cyber Security Operations Manager and receive technical direction from cybersecurity leadership
• Travel occasionally to acquired organizations, branch locations, data centers, offices, or other company facilities

• Support cybersecurity policy governance and regulatory compliance activities across multiple international authorities
• Monitor regulatory developments and conduct cybersecurity regulatory research and analysis
• Assist with the full policy lifecycle, including development, review, approval, publication, communication, implementation, and periodic recertification
• Coordinate policy reviews and stakeholder engagement across Cybersecurity, Legal, Compliance, Privacy, Risk Management, Technology, and business teams
• Maintain policy documentation, repositories, implementation trackers, compliance evidence, milestones, action items, and remediation activities
• Participate in governance meetings, working groups, and review sessions; document outcomes and track follow-up actions
• Prepare policy governance metrics, compliance summaries, management reports, regulatory updates, executive summaries, and implementation status reports
• Provide guidance on policy requirements and implementation expectations
• Translate regulatory requirements into cybersecurity policies, standards, procedures, controls, and implementation plans
• Support regulatory impact assessments, gap analyses, compliance initiatives, and remediation activities
• Coordinate stakeholder engagement, evidence collection, and implementation activities for regulatory compliance
• Track regulatory risks, dependencies, issues, corrective actions, and compliance outcomes
• Identify opportunities to improve regulatory monitoring, reporting, and compliance processes through standardization, automation, and operational efficiencies

Associate Cybersecurity Analyst – Bilingual

• Strengthen the security and resilience of Fervo's operational technology environments
• Translate OT security program objectives into durable technical controls, operating processes, and defensible evidence
• Evaluate OT architectures and data flows
• Support secure commissioning and change management
• Improve asset and configuration visibility
• Govern remote and vendor access
• Develop monitoring and incident-response capabilities
• Maintain risk and remediation records
• Support NERC CIP governance where applicable without independently determining regulatory applicability or certifying compliance
• Partner with Operations, OT and controls engineering, project delivery, IT, enterprise cybersecurity, compliance, legal, and third parties

Security Analyst jobs in Texas

Senior Cyber Security Analyst – Vulnerability Management

Senior Cyber Security Analyst – Vulnerability Management

Associate Cybersecurity Analyst – Bilingual

Senior OT Security Analyst