Senior Cybersecurity Analyst

Flywheel Energy is seeking an experienced and driven Senior Cybersecurity Analyst to protect the data, infrastructure, and operational systems that power our ~1,000-person upstream oil and gas business. The Senior Cybersecurity Analyst will serve as a primary defender of Flywheel's digital assets, acting as the first line of response for security alerts, incidents, and vulnerabilities. Responsible for monitoring, investigating, and remediating threats across our IT and OT environments, supporting security compliance, managing key security tools, and helping build a stronger security culture across the organization.

Key Responsibilities Security Operations & Incident Response

• Serve as the primary point of contact for monitoring, acknowledging, investigating, and escalating cybersecurity alerts and incidents.
• Lead or participate in incident response activities including containment, eradication, recovery, and post-incident review.

Threat & Vulnerability Management

• Perform regular vulnerability assessments, penetration testing support, and security control testing across systems and networks, and address security gaps.
• Track and prioritize remediation of vulnerabilities in coordination with infrastructure and application teams.

Security Tool Administration

Administer And Optimize Flywheel's Security Stack, Including

• Endpoint detection and response, threat and vulnerability management, and attack surface reduction across all managed devices.
• Information Protection & Data Security — data classification, sensitivity labeling, data loss prevention (DLP), and insider risk management.
• Device compliance policy enforcement, mobile device management (MDM), and endpoint security configuration.
• Security awareness training program administration, phishing simulation campaigns, and employee risk reporting.
• Leverage Anthropic Claude (AI) to accelerate security operations including threat research and summarization, drafting and updating SOPs and incident reports to increase team efficiency and response speed.

Security Governance, Risk & Compliance

• Apply and enforce a security framework across the business, vendors, and contractors to ensure consistent compliance.
• Represent security interests during acquisition and divestiture activity and system integration projects.
• Monitor compliance with applicable internal and external security policies and data protection standards.

OT/IT Convergence & Energy-Specific Security

• Support the security of OT and ICS/SCADA environments integral to oil and gas field operations, applying appropriate frameworks and controls.
• Collaborate with cloud, network, AI, and infrastructure teams to ensure consistent security posture across hybrid environments.
• Evaluate and mitigate risks associated with remote field connectivity, production systems, and operational technology platforms.

Litigation Support

• Support legal hold administration in coordination with Legal and HR, including custodian identification, hold issuance, and tracking through Microsoft Purview eDiscovery — ensuring defensible, auditable processes from initiation through release.
• Assist with eDiscovery data collections, processing, and production workflows following EDRM pipeline best practices from identification through production.