Analyst, Security Operations Center (SOC)

Company Description

Pilot Company is an industry-leading network of travel centers with more than 30,000 team members and over 750 retail and fueling locations in 44 states and six Canadian provinces. Our energy and logistics division serves as a top supplier of fuel, employing one of the largest tanker fleets and providing critical services to oil operations in our nation's busiest basins. Pilot Company supports a growing portfolio of brands with expertise in supply chain and retail operations, logistics and transportation, technology and digital innovation, construction, maintenance, human resources, finance, sales and marketing.

Founded in 1958 by Jim A. Haslam II and currently led by CEO Adam Wright, our founding values, people-first culture and commitment to giving back remains true to us today. Whether we are serving guests, a fellow team member, or a trucking company, we are dedicated to fueling people and keeping North America moving.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or any other characteristic protected under applicable federal, state, or local law.

Military encouraged to apply.

Job Description

The SOC (Security Operations Center) Analyst plays a crucial role in maintaining the security of an organization's information systems and networks. They are responsible for monitoring, detecting, and responding to security incidents and threats in real-time. The SOC Analyst works closely with other members of the security and IT teams to ensure that security measures are implemented effectively and that any vulnerabilities or breaches are promptly addressed.

1. Monitor security events and alerts from various sources, with Splunk.
2. Analyze and investigate potential security incidents to determine their nature, scope, and impact.
3. Respond to security incidents by following established procedures, including containment, eradication, and recovery.
4. Review vulnerability assessments and penetration testing to identify potential weaknesses in the organization's systems.
5. Maintain documentation to properly escalate any security incidents to the Cyber Incident Response Team (CIRT)
6. Stay up to date with the latest trends in cybersecurity threats and technologies.
7. Collaborate with other teams to implement security controls and measures to mitigate risks.
8. Participate in incident response exercises and tabletop simulations to test the effectiveness of the organization's incident response plans.
9. Provide recommendations for improving the organization's overall security posture.
10. Model behaviors that support the company’s common purpose; ensure guests and team members are supported at the highest level.
11. Ensure all activities are in compliance with rules, regulations, policies, and procedures.
12. Complete other duties as assigned.
13. Model behaviors that support the company’s common purpose; ensure guests and team members are supported at the highest level
14. Ensure all activities are in compliance with rules, regulations, policies, and procedures
15. Complete other duties as assigned

Qualifications

1. High school diploma or equivalent certificate required.
2. Minimum 2 years in IT or Security required or equivalent combination of education and experience
3. Prior experience working as a SOC Analyst or in a similar role.
4. In-depth knowledge of network protocols, operating systems, and cybersecurity best practices
5. Familiarity with SIEM tools, intrusion detection/prevention systems (IDS/IPS), firewalls, antivirus software, etc.
6. Strong analytical skills with the ability to quickly analyze complex data sets.
7. Excellent problem-solving skills with attention to detail
8. Ability to work under pressure and handle multiple incidents simultaneously.
9. Good communication skills, both written and verbal
10. Relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH) are a plus.
11. Understanding of regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) is desirable.
12. Strong written and verbal communication skills.
13. Ability to develop effective working relationships.
14. Strong organizational skills with ability to handle competing priorities and plan accordingly to meet deadlines.
15.  Ability to maintain focus and rapidly develop new skill proficiency.
16. Ability to work under pressure in a fast-paced, dynamic environment with limited supervision, both individually and with a team.
17. Results-focused and a strong problem solver.
18. Desire to research and master new concepts, technologies, and solutions toward ongoing tasks and deliverables

Additional Information

• Travel required is up to 5%
• General office work requiring sitting or standing for long periods of time, including on airplanes and in cars.
• This position requires candidates to be legally authorized to work in the United States without employer sponsorship