{"id":2425254,"url":"https://alion.io/job/oxy-it-cyber-security-expert","title":"IT Cyber Security Expert","company":{"id":1757470,"name":"Oxy","domain":"oxy.com","url":"https://alion.io/company/oxy-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":203000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1121},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"GDPR","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Scrum","optional":false},{"name":"SIEM","optional":false},{"name":"Waterfall","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-13T11:59:13Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Oxy produces, markets and transports oil and natural gas to maximize value and provide resources fundamental to life. The company leverages its global leadership in carbon management to advance lower-carbon technologies and products. Headquartered in Houston, Oxy primarily operates in the United States, Middle East and North Africa. To learn more, visit Oxy\nOxy strives to attract and retain talented employees by investing in their professional development and providing rewarding opportunities for personal growth. Our goal is to meet the highest employer standards by ensuring the health and safety of our employees, protecting the environment and positively impacting our communities where we do business.\nWe are looking for an experienced and motivated individual to fill the position of Expert IT Cyber Security within our IT Cyber Security Operations team group based in Houston, Texas. In this role, the candidate will serve as a Microsoft Sentinel SIEM Administrator to own, optimize, and scale our threat detection platform across hybrid IT and Operational Technology (OT) environments.\nThe candidate will manage the end-to-end administration of Microsoft Sentinel-including data ingestion, ASIM parsing, and the engineering of custom KQL analytics rules-while building automated SOAR playbooks using Azure Logic Apps, optimizing workspace storage costs, and collaborating closely with the SOC to deliver rapid response capabilities and robust compliance monitoring.\nKey Responsibilities:\nAdminister and maintain the Microsoft Sentinel SIEM platform, including log ingestion, ASIM parsing, normalization, and analytical rule tuning.\nDevelop and manage custom analytics rules, Workbooks (dashboards), threat hunting queries, and alerts to detect security threats.\nDesign, build, and maintain automated workflows and mitigation playbooks using Azure Logic Apps and Sentinel Automation Rules.\nIntegrate data sources across on-prem, cloud, and OT environments to ensure comprehensive visibility.\nMonitor system health, performance, ingestion costs, and storage utilization (retention/archive tiers) of the Log Analytics Workspaces.\nCollaborate with SOC analysts, incident responders, Security tools SMEs, and threat hunters to enhance detection.\nConduct regular reviews of log sources and parsing accuracy to ensure data quality.\nSupport compliance and audit requirements by maintaining documentation and reporting capabilities.\nStay current with emerging threats, SIEM technologies, and best practices.\nOther security-related projects that may be assigned according to skills.\nRequired Qualifications:\nBachelor’s degree in computer science, cybersecurity, or a related area of study.\n7+ years of experience administering enterprise SIEM platforms, with a strong preference for 3+ years of hands-on experience with Microsoft Sentinel.\nStrong proficiency in Kusto Query Language (KQL), regex, or other query languages used in SIEM platforms, along with experience building custom detection rules.\nExperience with log ingestion, parsing, and normalization from diverse sources (Windows, Linux, firewalls, cloud services, and OT systems).\nFamiliarity with the MITRE ATT&CK framework and threat detection methodologies.\nUnderstanding of incident response workflows and integration with SOAR tools.\nAbility to work with sensitive and confidential information while maintaining the highest level of confidentiality, professionalism, and ethics.\nExcellent written and oral communication skills, with the ability to explain complex technical threats clearly to both technical and non-technical audiences.\nStrong analytical troubleshooting capabilities and a proven ability to work independently while maintaining standard technical documentation.\nAbility to work dynamically in a collaborative team environment utilizing structured project management frameworks (Waterfall and/or Scrum).\nDesired Qualifications:\nRelevant technical certifications are highly preferred, such as Microsoft Certified: Security Operations Analyst Associate (SC-200), CISSP, or GIAC (e.g., GCIH, GCIA).\nHands-on experience securing Operational Technology (OT/ICS) environments.\nKnowledge of data governance and regulatory compliance frameworks governing enterprise and industrial environments (e.g., GDPR, NIST, ISO/IEC 27001 & 27019, or IEC 62443).\nRecruitment Fraud\nIt has come to our attention various individuals and/or organizations are contacting people falsely pretending to recruit on behalf of Oxy. Please be aware that these recruiting scams and communications do not originate nor are they associated with our recruitment process. All Oxy job postings and offers will require a completed application through our company website.\nOxy does not charge a fee at any stage of the recruiting process. We will never:\nAsk you to pay for applications, interviews, meetings, processing, training or for any other fees\nUse recruiting or placement agencies that charge candidates an advance fee of any kind or\nRequest personal information such as passport and bank account details at an early stage of our recruitment process. We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department.\nAll qualified applicants will receive consideration for employment without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.","description_format":"text","description_chars":5727,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Jewelry","Plastics & Polymers","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-13T07:33:42Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.503,"p_room":0.35,"age_days":49,"expected_fill_days":22,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-13T14:06:09Z"},"pay":null,"html_url":"https://alion.io/job/oxy-it-cyber-security-expert","json_url":"https://alion.io/job/oxy-it-cyber-security-expert.json","meta":{"generated_at":"2026-10-13T14:06:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21678,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757470},"rest":"https://alion.io/mcp/rest/get_company?id=1757470"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foxy-it-cyber-security-expert"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foxy-it-cyber-security-expert"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foxy-it-cyber-security-expert"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/oxy-it-cyber-security-expert\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foxy-it-cyber-security-expert"}]}