IT Security Analyst

Location: Green River, WY (On-site)
Supports operations across the United States and collaborates closely with global teams in the United Kingdom and Turkey.

Reports to:

Global Information Security Lead

Direct Reports:
None

Role

Purpose:

The IT Security Analyst is the primary hands‑on cybersecurity resource for WE Soda’s United States operations, covering both IT and OT/ICS environments. Reporting to the Global Information Security Lead, the role engineers, operates, and continuously improves the security controls protecting the US business — including firewalls and network security, SIEM, endpoint detection and response (EDR), OT security monitoring, email security, and data loss prevention — and acts as the local lead for security incident response, vulnerability management, and the security awareness program.

The role works closely with the US IT team and with global information security colleagues in the UK and Turkey and supports post‑acquisition integration by aligning US network and security services with WE Soda’s global standards, policies, and compliance requirements.

• Serve as the principal technical cybersecurity specialist for the US region, spanning IT and OT/ICS environments.
• Engineer, configure, and maintain network security infrastructure: firewalls, VPN/remote access, network segmentation, IDS/IPS, and wireless security.
• Administer the SIEM platform: log source onboarding, detection rule and use‑case development, alert triage, tuning, dashboards, and reporting.
• Administer the EDR/endpoint protection platform: policy management, threat hunting, containment, and response actions.
• Support OT/ICS security: asset visibility and passive monitoring, IT/OT segmentation, and secure remote access to industrial environments, aligned with IEC 62443 and NIST SP 800-82.
• Lead local detection, triage, containment, and recovery of security incidents, following global incident response playbooks and escalation paths.
• Support the wider security program: email security and phishing triage, data loss prevention (DLP), security awareness activities, vulnerability and patch management, and audit/compliance evidence gathering.
• Implement and enforce WE Soda security policies and standards and contribute to an Information Security Management System aligned with NIST CSF 2.0 and ISO 27001.
• Communicate project status, risks, and achievements clearly to internal and external partners, including managed service providers.

• Configure, manage, and troubleshoot networking and security equipment (firewalls, switches, wireless, VPN concentrators).
• Maintain secure network architecture and segmentation, including IT/OT boundary controls.
• Conduct regular security assessments, network audits, and configuration reviews.
• Apply security patches and firmware updates to network devices and security systems.
• Perform network traffic analysis and packet inspection to investigate anomalies.

• Monitor and triage SIEM and EDR alerts; investigate suspicious activity and elevate per incident response procedures.
• Execute containment and remediation actions during security incidents and produce incident reports and lessons learned.
• Perform phishing triage and message removal for reported emails; feed confirmed indicators of compromise into blocking controls.
• Coordinate vulnerability scanning, prioritization (including known‑exploited vulnerabilities), and remediation tracking with system owners.
• Act as the US point of contact for the managed security service provider (MSSP/MDR) and external penetration testing engagements.

• Support deployment and operation of OT security monitoring…