Cybersecurity Analyst

The Opportunity

- Cybersecurity Analyst at a growth-oriented energy company

- Ideal for someone passionate about teaching, influencing, and driving change in a rapidly evolving cybersecurity environment.

- Opportunity to own and develop a major enterprise-wide program with visibility across all business units.

- Blend strategy and hands-on work, ideal for someone who enjoys both designing frameworks and executing meaningful initiatives.

- Join a high caliber team to enable and support the company’s objectives through security initiatives.

- Reporting to the Sr. Manager Cyber Security, you will work closely with IT, cybersecurity, and other business teams, offering broad exposure and strong cross-functional partnerships.

Key activities include:

- Lead the design, implementation, and continuous improvement of NIST CSF2.0 Cybersecurity Governance framework, ensuring alignment with regulatory, industry and organizational risk management standards.

- Own and mature the Security Awareness and Cyber Education program, developing targeted training, behavioral change initiatives, and executive-level communications to strengthen the organization’s security posture.

- Develop and maintain cybersecurity playbooks and standard operating procedures (SOPs) to enhance incident response coordination, threat intelligence sharing, and collaboration across IT, Security Operations, and Business Continuity teams.

- Oversee EDR/MDR services, including monitoring service performance, validating detection use cases, reviewing alerts and escalations, and ensuring effective threat containment and remediation.

- Partner with internal SOC and external MDR providers to continuously optimize detection engineering, response workflows, and threat-hunting capabilities.

- Lead Threat and Vulnerability Management activities, including vulnerability assessments, risk prioritization, remediation tracking, and reporting to stakeholders.

- Conduct trend analysis on security events, vulnerabilities, and user behavior metrics to identify systemic risks and recommend enhancements to preventive and detective controls.

- Develop, track, and report cybersecurity KRIs/KPIs to measure program effectiveness, control maturity, and risk reduction.

- Act as a trusted advisor to IT and business stakeholders, translating complex cyber risks into actionable insights and risk-based decisions.

- Support internal and external audits by providing governance documentation, evidence of control effectiveness, remediation plans, and closure validation for audit findings.

- Contribute to short- and long-term cybersecurity strategy development, ensuring governance, detection, response, and education initiatives align with evolving threat landscapes.

Note: This description is intended to give you a general overview of the position. Additional responsibilities and opportunities may be identified based on current business needs.

Qualifications

To meet the basic qualifications for this role, you will have legal authorization to work permanently in the United States for any employer without requiring a visa transfer or visa sponsorship.

Additional Qualifications Include

- High School Diploma or equivalent required

- Relevant bachelor’s degree in business or technical field preferred; An equivalent combination of education and work experience accepted

- Minimum of 5 years’ of IT Security and Compliance experience required

- Minimum of 5 years’ experience leading collaborative programs and IT security projects preferred

- Ability to work in-office Monday-Thursday required, with work from home option on Friday

- Experience managing the 24x7 third-party Security Operations Center required

- Hands-on experience managing and operating MDR/EDR platforms required

- Ability to investigate, triage, and interpret security alerts, logs, and telemetry from endpoint and supporting systems required

- Demonstrated experience in incident response (IR) planning, execution, and post-incident analysis required

- Knowledge of security methodologies, policies, standards and industry practices required

- Demonstrated ability to work independently and achieve goals with minimal supervision required

- Ability to initiate, facilitate and promote Cybersecurity within the organization and monitor adherence to Cybersecurity policies, standards and controls required

- Intermediate knowledge of the Microsoft Security suite products preferred

- Strong knowledge of threat detection methodologies, attacked techniques, and security frameworks such as NIST preferred

- Information security certification is preferred

- Demonstrated knowledge and ability to stay current on the latest Cybersecurity legislation, regulations, advisories, alerts and vulnerabilities preferred

- Demonstrated ability to manage business and technical relationships with internal and external clients preferred

- Previous experience with Project Management (Scrum, Agile, etc.) preferred

- Previous experience with Risk Management preferred

About Us

At Par Pacific, we own and operate market-leading energy and infrastructure businesses in logistically complex markets. We have built a team of oil and gas industry veterans and subject matter experts to lead our organization with an entrepreneurial spirit and a collaborative, problem solving approach. We bring our diverse strengths and motivation to complex markets where we seek out diamonds in the rough. As a nimble, growing organization, we actively pursue new opportunities with corporate financing know-how, respond to local market demands, and adapt to changing external environments.

More Good Reasons to work for Par Pacific

Unique Culture

There is nothing ordinary about Par Pacific a niche player in the energy space. And there's certainly nothing ordinary about Par Pacific employees. We are driven, hardworking, entrepreneurial-minded professionals who love to win. If that describes you, you'll fit right in.

Location, Location, Location

Because Par Pacific operates in some of the most beautiful places throughout the country, our employees get to make these places their home and enrich their lives. The office where you'll work is in the CityCentre in Houston, Texas, located on the west side of Houston near I-10 and the Sam Houston Tollway. It's a vibrant area of the city with plenty of places for lunch or to wind down after work.

Opportunistic growth strategy

At Par Pacific, we look for operations with strong fundamentals and great employees who can move a business forward. Our management team has deep experience in the energy industry, as well as in leading mergers, acquisitions, and integrations of newly acquired companies.

Focused on the future

We are an energy company that has recognized the imperative and embraced the opportunity to begin the transition from fossil fuels. We are developing products that help reduce greenhouse gas emissions.

Excellent Compensation And Benefits

In addition to a competitive salary, we offer a strong comprehensive benefits package that includes medical, dental and vision insurance, a robust allotment of paid time off, a 401(k) with company match, retirement savings plans, educational reimbursement, and more. Full-time employees (and their families) are offered medical (with prescription coverage), dental, vision, voluntary critical illness, accident, life/AD&D insurance, Flexible Spending Account and Employee Assistance Program.  Employees can purchase company stock at discounted prices through the Employee Stock Purchase Program.

Our Headquarters

Par Pacific Holdings, Inc., based in Houston, Texas, owns, manages and maintains interests in energy and infrastructure businesses. We are a growing energy company focused on renewable and conventional fuels in the Western United States. Par Pacific also owns 46% of Laramie Energy, LLC, a natural gas production company with operations and assets concentrated in Western Colorado.  Our common stock is publicly traded on the NYSE under the trading symbol "PARR".

Our Refineries and Logistics Operations

We own and operate refineries in Hawaii, Montana, Washington, and Wyoming, with total operating throughput capacity of over 219 Mbpd. Par Pacific owns and operates one of the largest energy networks in Hawaii with 94,000 bpd of operating refining capacity, a logistics system supplying the major islands of the state and 90 retail locations. In the Pacific Northwest and the Rockies, Par Pacific owns and operates 124,000 bpd of combined refining capacity and related multimodal logistics systems.

Our Retail Operations

We own and operate 90 retail locations in Hawaii under the Hele and 76 brands and 33 retail locations in Washington and Idaho under the nomnom brand.

Par Pacific is an equal opportunity employer

Par Pacific prohibits discrimination and harassment of any type and affords equal employment opportunities to employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status,

genetic information or any other status protected by applicable law.

Note: Par Pacific will not accept calls or unsolicited resumes from third-party recruiters. All candidates are required to apply through this web posting.