IT Security Analyst

At WE Soda, we believe you are the most important asset. We are taking steps to attract and retain talented and motivated salaried entry-level and experienced individuals. Come utilize your skills and contribute to our continued success. Your new rewarding career begins here!

WE Soda is the world’s largest and most sustainable producer of soda ash, with operations in Turkey and two US-based facilities, located in Green River, Wyoming. At WE Soda, we strive to be the global leader in safe, sustainable, and innovative soda ash solutions, inspiring progress and creating a lasting positive impact for our industry and communities.

Why Join WE Soda?

- Highly competitive salary commensurate with experience.

- Medical, Dental, Life & Disability Insurance, Vision, Flexible Spending (Medical and Dependent Care) and Health Savings Accounts (HSA), Pre-paid Legal, beginning first day of employment: company funds a portion of HSA contribution if eligibility is met.

- 401(k) Savings and Investment Plan for salaried employees, the company makes Safe Harbor matching contributions (fully vested immediately) of 100% up to the first 5% of eligible pay you contribute.

- Tuition reimbursement programs are available to qualifying employees for approved programs.

- Paid time off based on years of service with potential credit given for previous work experience.

- Company-paid transportation available for our Wyoming-based employees to our plants from Green River, Rock Springs, and Bridger Valley.

- Flexible work schedule (may be available and will vary based on location and/or position).

- Relocation assistance may be available based on position.

Position Title: IT Security Analyst

Location: Remote

Key Responsibilities:

- Configure, manage, and troubleshoot security-focused network infrastructure, including firewalls, switches, wireless systems, and VPN technologies.

- Implement, maintain, and enforce security policies, standards, and procedures aligned with recognized frameworks (ISO 27001, NIST CSF, NIST 800 53, NIST 800 82).

- Maintain secure network architecture, segmentation, and access controls across enterprise environments.

- Partner with internal teams and external service providers to coordinate project activities, report progress, and ensure successful delivery of security initiatives.

- Support the design, implementation, and continuous improvement of the organization’s Information Security Management System (ISMS).

- Contribute to incident response lifecycle activities, including detection, triage, containment, investigation, and documentation

Activities:

Engineering and Provisioning

- Conduct regular security assessments, vulnerability scans, and network security audits to identify and remediate risks.

- Configure, maintain, and monitor next generation firewalls, VPNs, network access controls, and switching infrastructure.

- Review and analyze network logs, SIEM alerts, and security telemetry to identify potential threats or anomalous behavior.

- Apply security patches, firmware updates, and hardening standards to network devices, servers, and supporting systems.

- Perform network traffic analysis and packet inspection to support threat hunting and root cause investigations.

- Collaborate closely with the SOC to support escalations, investigations, and security event triage.

Operations and Support

- Monitor the performance, reliability, and security of critical systems, proactively identifying and resolving issues.

- Maintain systems in accordance with security best practices, operational requirements, and compliance obligations.

- Support backup and recovery processes for infrastructure and security systems.

- Participate in on call support rotation as required for critical incidents and after hours response.

- Support post acquisition integration activities, ensuring alignment of network and security services with corporate standards, architecture, and compliance requirements.

Maintenance

- Develop, maintain, and update documentation, including system configurations, diagrams, runbooks, and procedures.

- Oversee system availability, ensuring appropriate uptime and reliability through proactive monitoring and maintenance.

- Conduct performance tuning, hardware upgrades, lifecycle management, and optimization of security and network infrastructure.

Skill, Capability and Educational Requirements:

Required Skills & Capabilities

- High school diploma or GED and a minimum of 5 years of hands on experience in network administration and cybersecurity within enterprise environments.

- Proficiency working with command line interfaces (Cisco IOS/FTD, Linux, or similar).

- Strong understanding of firewalls, IDS/IPS, endpoint protection, and network security principles.

- Deep technical knowledge of networking technologies, including routing protocols, VLANs, ACLs, NAT, and VPN solutions.

- Experience monitoring, analyzing, and interpreting logs or alerts from SIEM, firewalls, and security tools.

- Excellent problem solving abilities with the capability to clearly communicate findings and recommendations to both technical and non technical audiences.

- Strong attention to detail, organizational skills, and documentation discipline.

- Self starter with strong critical thinking, analytical, and collaboration skills.

Preferred Skills & Capabilities

- Degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

- Experience implementing security controls across networks, systems, identity platforms, and cloud environments.

- Hands-on experience with:

- Cisco FTD, FMC, WLC, ISE, AnyConnect VPN

- MFA and zero-trust platforms

- Microsoft SCCM, Commvault

- Dragos or other OT/ICS security solutions

- Familiarity with SIEM, SOAR, EDR/XDR, and vulnerability management platforms.

- Certifications such as:

- CompTIA Network+ - CompTIA Security+

- Cisco CCNA/CCNP Security

WE Soda is an equal opportunity employer. All employment decisions are made without regard to race, color, religion, national origin, sex (including pregnancy, childbirth, and related medical conditions, sexual orientation, or gender identity), age (40 or older), disability, genetic information (including employer requests for, or purchase, use, or disclosure of genetic tests, genetic services, or family medical history), or any other legally protected categories. This includes providing reasonable accommodation for employee's and applicant's disabilities or religious beliefs and practices. Alternative methods of applying for employment are available to individuals unable to apply through this site because of a disability. Contact WE Soda Human Resources to discuss reasonable accommodations by sending an email to humanresources@wesoda.com.