Cybersecurity Analyst

Position Summary

The Cybersecurity Analyst is a key member of the IT Infrastructure & Security team within DCC Propane's Digital & IT organization, responsible for supporting the company's cybersecurity coverage and completeness, risk identification and mitigation, and compliance efforts across both corporate systems and field operations. This role plays an essential part in protecting DCC Propane's customer data, operational systems, and digital platforms by ensuring full and complete security tools coverage and monitoring of threats, supporting incident response, and strengthening security controls across the enterprise.

Operating in a highly distributed environment that includes office users, field technicians, customer platforms, and third-party systems, this role must balance strong attention to technical execution with practical business collaboration. The Analyst will work closely with stakeholders across operations, customer service, and digital teams to ensure appropriate security coverage is in place and embed secure practices into day-to-day workflows to improve the company's overall security posture without disrupting business operations.

This role will also support in the day to day operations of the overall IT Infrastructure and Security team in both projects and ticket resolution as needed.

• Ensure Complete & Full Security Coverage
  • Effectively monitor and maintain complete and full security coverage of all endpoints with cyber security monitoring tools as provided in the DCC Energy corporate security program.
    • Identity & Access Management:
      Okta, Microsoft Entra
    • Endpoint Management:
      Intune
    • Email Security:
      Mimecast, Exchange
    • Web & Network Security:
      Zscaler, Cloudflare, Checkpoint WAF
    • Vulnerability & Monitoring:
      Tenable, SIEM (Secureworks/Taegis)
  • Assist with system configuration, troubleshooting, and continuous optimization in partnership with senior team members.
• Security Operations & Incident Response
  • Monitor tools and dashboards and respond to security alerts in collaboration with our security partners across identity, endpoint, network, and cloud environments.
  • Respond to case notes, investigate, triage, and upscale cybersecurity incidents, supporting containment and resolution activities.
  • Coordinate with vendors that support security monitoring activities (e.g., SaaS platforms, identity providers, network tools) and implement remediation as directed.
  • Document incidents, root cause findings, and remediation actions to support audit and continuous improvement.
• Vulnerability Management & Risk Reduction
  • Execute vulnerability scans and support prioritization and tracking of remediation efforts across IT and digital platforms (Taegis / Tenable).
  • Assist with penetration testing coordination and ensure findings are documented and resolved.
  • Partner with infrastructure and application teams to drive timely remediation aligned to business risk and operational impact.
• Identity, Access & Endpoint Security
  • Support identity and access management processes, including provisioning, deprovisioning, and access reviews.
  • Help enforce least-privilege access and secure authentication practices across systems such as Okta and Microsoft Entra.
  • Assist with endpoint security and device compliance (e.g., Intune), including support for field devices and mobile users.
  • Troubleshoot access and authentication issues impacting employees, technicians, and third-party users.
• Email, Web & Customer Platform Security
  • Support protection of email systems, customer communications, and web platforms from phishing, malware, and external attacks through monitoring of security solutions and partnership with the business to drive education and awareness of risk.
  • Assist in administration of tools such as Mimecast, Checpoint Harmony ,Zscaler, Cloudflare (DNS), and web application firewalls.
  • Help ensure the availability and security of customer-facing platforms, digital portals, and integrations (e.g., Hub Spot, Docusign, Luminance, websites).
  • Act as a supporting technical contact for security-related issues impacting digital customer experiences.
• Stakeholder Collaboration & Security Enablement
  • Partner with teams across operations, customer service, finance, and digital platforms to promote secure system usage.
  • Translate cybersecurity requirements into practical, easy-to-follow guidance for non-technical users, including field employees.
  • Support digital transformation initiatives (e.g., system integrations, workflow automation, field mobility) by identifying risks and recommending security improvements.
  • Help drive a shared ownership model for security, ensuring it is embedded into daily business processes rather than centralized in IT alone.
• Compliance, Audit & Governance
  • Assist in internal and external audit activities, including evidence collection and documentation.
  • Track and support remediation of audit findings and security control gaps.
  • Help maintain and update cybersecurity policies, standards, and procedures aligned to DCC Propane requirements and…