This job was posted by https://www.arjoblink.arkansas.gov : For more
information, please see: https://www.arjoblink.arkansas.gov/jobs/4878275
Summit Utilities
**Join our growing team and discover why Summit Utilities, Inc.
continues to earn national and regional recognition as an employer of
choice. Our recognitions include Best Places to Work in Maine
(20192025); Best Places to Work in Arkansas (2020, 2023, 2025); Best
Places to Work in Oklahoma (20222025); Best Places to Work in Missouri
(2023 and 2026); Best Places to Work in Colorado (2025); Forbes Americas
Best Small Employers (2023); and, most recently, Proud and Purposeful
Employer (2026).**
Summit is a growing natural gas utility providing safe, reliable, and
clean burning natural gas service to homes and businesses in Arkansas,
Colorado, Maine, Missouri, Oklahoma, and Texas. Being part of the Summit
team means embracing excellence and innovation, committing to safety
each and every day, and doing all that we can to serve each other, our
customers, and the communities where we live. We aim to bring warmth and
energy to everything we do.
**We have an exciting opportunity for a Security Analyst I (SGL15). This
hybrid position may be based in our Little Rock, Fort Smith, or
Fayetteville, Arkansas offices.
POSITION SUMMARY**
The Security Analyst I protects Summit Utilities' business systems,
operational technology (OT), and data by monitoring for threats,
investigating and responding to security events, and owning assigned
security control areas from start to finish. This role works across both
the corporate IT environment and the Industrial Control Systems (ICS)
and SCADA environment that supports Summit's natural gas distribution
system, partnering closely with IT, SCADA, and Gas Control teams to keep
operations safe, reliable, and secure. Reporting to the Director of
Information Security, the Information Security Analyst is an independent
contributor who leads Tier-2 investigations, tunes detections, drives
vulnerability remediation with system owners, and prepares evidence for
audits and assessments aligned to the TSA Pipeline Security Directives,
C2M2, NIST CSF, and NERC CIP. The role also helps build a strong
security culture through awareness training, interactive exercises, and
clear communication with employees at every level of the organization.
PRIMARY DUTIES AND RESPONSIBILITIES
Monitor security alerts and log data across IT and OT environments;
investigate suspicious activity and respond to Tier-2 security events
from triage through resolution.
Document, classify, and track security events and incidents; draft
incident reports and escalate major incidents, and any event affecting
OT operations, according to the incident response plan.
Write and tune detection queries and correlation rules to improve alert
quality and reduce false positives.
Perform forensic analysis and evidence collection on suspicious devices;
conduct legal hold actions and investigations when required.
Apply threat intelligence from sources such as CISA and the DNG-ISAC to
investigations and detections, mapping activity to MITRE ATT&CK for
Enterprise and ICS.
Coordinate with SCADA Analysts, SCADA Technicians, and Gas Controllers
on OT alerts and response, following a safety-first, approval-required
approach for any response action in OT environments.
Review OT network monitoring alerts and support security visibility of
control systems, including Remote Terminal Units (RTU), Programmable
Logic Controllers (PLC), and field communication technologies.
Support hardening, configuration, and testing of security updates for IT
and OT systems
Equal employment opportunity, including veterans and individuals with
disabilities.
PI287822562
