Clark Construction Group is looking for a skilled and motivated Cybersecurity Analyst to join our growing cybersecurity team. This role is a critical component of our security operations, bridging the gap between front-line detection and advanced threat response. The ideal candidate will be responsible for both proactive and reactive cybersecurity measures, including in-depth incident analysis, threat hunting, and the development of new security protocols to strengthen our defenses. You’ll work closely with other IT teams and be a key player in protecting our corporate and project-based digital assets.

Reactive Security (Incident Response)

• Incident Investigation: Act as a primary escalation point for security alerts and incidents from Tier 1 analysts. Conduct in-depth analysis of security events, logs, and network traffic to determine the scope, impact, and root cause of security incidents.
• Containment & Remediation: Lead and execute containment and remediation efforts for confirmed incidents, including malware removal, system isolation, and compromised account deactivation.
• Documentation & Reporting: Maintain meticulous documentation of all security incidents, including a timeline of events, actions taken, and lessons learned. Prepare and present detailed reports for management and stakeholders.
• Forensic Analysis: Conduct basic digital forensics to gather and preserve evidence related to security breaches.

Proactive Security (Threat & Vulnerability Management)

• Threat Hunting: Proactively search for signs of compromise, new attack techniques, and adversary tactics that may have bypassed initial security controls.
• Vulnerability Management: Assist with vulnerability scanning, assessment, and prioritization. Work with system owners to ensure timely patching and remediation of identified vulnerabilities.
• Security Tool Optimization: Continuously tune and refine security tools, such as our SIEM (Security Information and Event Management) system, IDS/IPS (Intrusion Detection/Prevention Systems), and EDR (Endpoint Detection and Response) platforms, to reduce false positives and enhance detection capabilities.
• Protocol Development: Develop and improve incident response playbooks, standard operating procedures, and other security documentation to enhance the team’s efficiency and readiness.

Basic Qualifications

• 5+ years of experience in a security operations center (SOC), incident response, or a similar cybersecurity role
• Strong understanding of TCP/IP protocols, networking concepts, and security principles
• Experience with a range of security tools, including vulnerability scanners, endpoint protection, and firewalls
• Good understanding of networking, including a firm grasp of network protocols, traffic analysis, and network security technologies.
• Proficiency in log analysis across various platforms (Windows, Linux, network devices)
• Solid analytical and problem-solving skills with the ability to correlate data from multiple sources
• Excellent communication and interpersonal skills for collaborating with technical and non-technical teams
• Ability to participate in an on-call rotation to provide 24/7 support for critical systems
• Alignment to Clark Standards of Excellence: Self-Motivated, Results Oriented, Adaptable, Team Player, Accountable, Ethical, Innovative, Resilient, Builds Relationships, Builds People / Teams & Followership, Sets Direction & Executes

Preferred Qualifications

• Knowledge of cloud security principles and platforms (AWS, Azure, or GCP)
• Experience in a large, enterprise-level environment
• Familiarity with industry security frameworks (e.g., NIST, ISO 27001)
• Security Clearance preferred, not required

The work environment and requirements described below are representative of those necessary for an employee to successfully perform the essential functions of this role.
The Physical Side of the Role: Given that a good portion of your day will be spent at a desk, you should be comfortable with prolonged periods of focused work, whether it’s collaborating with colleagues, analyzing data, or developing strategies. The role demands effective communication and sharp visual acuity for reviewing complex documents and performing detailed computer work. While there are times for quiet concentration, you’ll also be expected to move actively throughout the office and travel occasionally to various locations, including dynamic construction sites, utilizing different modes of transportation. The ability to lift and move objects up to 10 pounds regularly, and up to 25 pounds on occasion (think a box of files or small office equipment), is also required.
Your Work Environment: Your primary workspace will be in our professional office, which has a typical, quiet-to-moderate noise and light levels. As part of your work, you may also be required to visit active construction sites. These environments are naturally more dynamic and can include exposure to outdoor weather conditions, louder noise, and moving equipment. Your safety is our top priority, and you’ll be expected to follow Clark Construction’s safety policies and procedures, and all applicable laws, at all locations.
Our High-Performing Culture: This is a demanding, high-performance environment. We are looking for candidates who are energized by challenge, thrive under pressure, and are prepared to do what it takes to achieve exceptional results. Success in this role requires significant commitment, including flexibility to work extended hours, especially during critical project phases or client deadlines. Beyond regular working hours, there will be occasions where business needs require your attention, particularly for time-sensitive matters or emergencies. You are expected to monitor and respond to communications (phone calls, emails, text messages) as required to address these situations effectively. Your ability to manage these expectations and be responsive when critical issues arise is key to your success in this role and our collective success as a team.
A Drug Free Workplace: Clark promotes a drug free workplace. A pre-employment drug “fitness for duty” screening is required, and the company conducts random quarterly drug “fitness for duty” tests

Please refer the Job description for details