{"id":4298362,"url":"https://alion.io/job/primoris-services-cyber-security-analyst","title":"Cyber Security Analyst","company":{"id":2289610,"name":"Primoris Services","domain":"prim.com","url":"https://alion.io/company/prim-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-11-14T02:27:07Z","board_verified":true,"closed_at":null,"days_open":88,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":88},"description":"Job Overview:\nThe Cybersecurity Analyst - SOC Operations is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the enterprise environment. This role serves as a key member of the Security Operations Center (SOC) and focuses on threat detection, incident response, endpoint security, identity threats, and security monitoring of enterprise infrastructure, cloud environments, and critical business systems.\nThe analyst will investigate security alerts, triage incidents, correlate threat intelligence, and collaborate with IT and infrastructure teams to contain and remediate cybersecurity risks. This position plays an operational role in maintaining enterprise security visibility and minimizing cyber risk exposure.\nKey Responsibilities/Accountabilities:\nSecurity Monitoring & Threat Detection\nMonitor enterprise security tools and alerts for suspicious activity, malicious behavior, or policy violations.\nAnalyze and triage security events generated from:SIEM platforms\nEndpoint Detection & Response (EDR)\nEmail security platforms\nNetwork monitoring tools\nIdentity and access monitoring solutions\nCloud security platforms\n\nInvestigate indicators of compromise (IOCs), anomalous behaviors, and suspicious user activity.\nCorrelate logs and events across multiple security systems to identify threats.\nEscalate high-risk incidents according to playbooks and incident severity classifications.\nIncident Response\nParticipate in cybersecurity incident response activities including:Detection\nTriage\nContainment\nEradication\nRecovery\nPost-incident review\n\nInvestigate phishing, malware, ransomware, account compromise, insider threat, and unauthorized access incidents.\nDocument incident findings, root cause analysis, and remediation recommendations.\nSupport after-hours cybersecurity response activities when necessary.\nEndpoint, Identity & Network Security\nMonitor endpoint security posture and investigate endpoint-related threats.\nAnalyze authentication anomalies including:Privileged account misuse\nImpossible travel\nMFA anomalies\nSuspicious logins\nExcessive failed authentication attempts\n\nSupport Zero Trust security initiatives through continuous monitoring of identity, device, and access risks.\nInvestigate unusual network behavior and lateral movement attempts.\nCloud Security Monitoring\nMonitor cloud security events across Microsoft 365, Azure, SaaS platforms, and enterprise cloud services.\nInvestigate risky cloud behaviors, privilege escalation, abnormal sharing, and unauthorized access attempts.\nAssist with remediation of cloud security findings and misconfigurations.\nVulnerability & Exposure Management Support\nReview vulnerability scan results and assist with prioritization of remediation activities.\nValidate remediation of critical vulnerabilities.\nMonitor exposure trends and recurring weaknesses affecting enterprise systems.\nSecurity Automation & Continuous Improvement\nAssist in developing playbooks and incident response procedures.\nSupport SOAR workflows and automation initiatives.\nIdentify opportunities to improve detection coverage and operational efficiencies.\nContribute to lessons learned and continuous improvement activities.\nRequirements / Basic Qualifications:\n5+ years of Cybersecurity experience required\nCrowdStrike Falcon experience required\nSecurity Monitoring & Detection:\nSIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, or similar\nEDR/XDR solutions such as Microsoft Defender for Endpoint or comparable platforms\nSecurity log analysis and event correlation\nIdentity & Access Security:\nIdentity monitoring in environments such as:Microsoft Entra ID\nActive Directory\nPrivileged Access Management systems\n\nAuthentication threat analysis\nNetwork & Cloud Security:\nFirewall, DNS, proxy, and network telemetry analysis\nExperience with:Zscaler\nMicrosoft security ecosystem\nCloud security monitoring tools\n\nFamiliarity with SaaS and remote-access security models\n Automation & Response:\nExperience with scripting (PowerShell, Python, or Bash preferred)\nFamiliarity with SOAR and security automation\nPreferred Certifications:\nPreferred certifications include:\nCompTIA Security+\nCompTIA CySA+\nGCIH\nAZ-500\nCISSP (preferred for senior analyst level)\nPAY EQUITY\n$110,000 - $120,000\nPrimoris Renewable Energy provides the following compensation range and general description of other compensation and benefits that it in good faith believes it might pay and/or offer for this position. This compensation range is based on a full-time schedule. Primoris Renewable Energy reserves the right to ultimately pay more or less than the posted range and offer additional benefits and other compensation, depending on circumstances not related to an applicant’s sex or other status protected by local, state, or federal law.\nCompany Overview:\nPrimoris Services Corporation is a premier specialty contractor providing critical infrastructure services to the utility, energy, and renewables markets throughout the United States and Canada. Built on a foundation of trust, we deliver a range of engineering, construction, and maintenance services that power, connect, and enhance society. On projects spanning utility-scale solar, renewables, power delivery, communications, and transportation infrastructure, we offer unmatched value to our clients, a safe and entrepreneurial culture to our employees, and innovation and excellence to our communities. To learn more, visit www.prim.com and follow us on social media at @PrimorisServicesCorporation.Benefits:\n401k w/employer match\n\nHealth/Dental/Vision insurance plans\n\nPaid time off\n\n10 paid holidays\n\nStock purchase plan\n\nEEO Statement\nWe are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.\nAgency Statement\nWe are not accepting resumes from Third Party Recruiting Firms for this position. If you are an Agency or Search firm representative, contact the Primoris Talent Acquisition Manager directly for consideration. Primoris or its subsidiaries will not be responsible for any fees arising from the use of resumes and online response forms through this source. In addition, Primoris or its subsidiaries will not be responsible for any fees on unsolicited resumes that are submitted to any member of the Staffing or Operations team. Primoris has established an approved vendor program for this service and will only consider accepting submissions from those approved firms. For consideration in becoming an approved vendor, contact HR.\nEqual Opportunity Employer\nThis employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.","description_format":"text","description_chars":6917,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Solar Energy","Security Operations","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-14T02:27:07Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.556,"p_room":0.28,"age_days":88,"expected_fill_days":30,"reasons":["conf:2","win:tail","crowd:brand"],"computed_at":"2026-11-14T05:06:54Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/primoris-services-cyber-security-analyst","json_url":"https://alion.io/job/primoris-services-cyber-security-analyst.json","meta":{"generated_at":"2026-11-14T05:06:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8510,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2289610},"rest":"https://alion.io/mcp/rest/get_company?id=2289610"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprimoris-services-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprimoris-services-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprimoris-services-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/primoris-services-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprimoris-services-cyber-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4298362}},{"tool":"search_jobs","arguments":{"company":"prim.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4298362},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}