Cyber SOC Analyst II Email and Endpoint Security (Houston, TX, US, 77064)

<p><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><strong>CenterPoint Energy and its predecessor companies have been in business for more than 150 years. </strong></span></span></p> <p> </p> <p><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><strong>Our Vision:</strong> Our vision is to become the most admired utility in the United States through the execution of our long-term growth strategy. We have an unwavering commitment to safely and reliably deliver electricity and natural gas to millions of people. </span></span></p> <p> </p> <p><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><strong>Our Commitment: </strong>CenterPoint Energy is committed to creating an inclusive work environment where business results are achieved through the skills, abilities and talents of our diverse workforce.</span></span></p> <p><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">At CenterPoint Energy, individuals are respected for their contributions toward our company objectives. We strive for an inclusive work environment across all levels that is reflective of the available workforce in the communities we serve.</span></span> </p> <p> </p><div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Job Summary</b></H2> </div><div><p style="margin-top:0.0pt;margin-bottom:8.0pt;font-family:Arial;font-size:12.0pt">The CSOC Analyst II – Email &amp; Endpoint Security is a member of the Cyber Security Operations Center (CSOC) team responsible for protecting CenterPoint Energy's users, email, endpoints, and mobile devices from advanced cyber threats. The analyst administers CenterPoint’s email threat detection tools, insider risk platform, and mobile device security system. The ideal candidate has hands-on experience with Proofpoint, Intune, O365.</p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Essential Functions</b></H2> </div><div><ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Serve as a Tier 2 escalation point for email security alerts originating from Proofpoint and Microsoft Defender for Office 365, performing header, URL, attachment, and payload analysis to determine scope of impact.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Monitor and triage mobile device security events and compliance violations in Microsoft Intune, including jailbroken/rooted devices, non-compliant configurations, and lost/stolen device response actions.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Investigate insider risk signals generated by Microsoft Purview Insider Risk Management and Data Loss Prevention (DLP) policies, partnering with HR, Legal, and the Insider Threat program as needed.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Partner with Security Engineering, Identity, Messaging, and End User Computing teams to recommend control improvements based on observed incidents and emerging threats.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Maintain situational awareness of the cyber threat landscape, especially threats targeting the energy sector and Microsoft 365 ecosystems, and translate intelligence into operational action.</span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Education Description</b></H2> </div><div><p style="margin-top:0.0pt;margin-bottom:8.0pt;font-family:Arial;font-size:12.0pt">Bachelor's degree in an IT-related field, or equivalent education and work experience.</p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Experience</b></H2> </div><div><p style="margin:0.0in;font-family:Arial;font-size:12.0pt"><span style="font-weight:bold">Experience:</span></p> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">2–4 years of professional IT experience, with demonstrated hands-on time in information security, cyber incident response, or a Security Operations Center.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Working operational experience with many of the following platforms: </span></li> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Proofpoint (Email Protection, TAP, TRAP)</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Defender for Office 365 and email security principles (SPF, DKIM, DMARC) </span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Defender for Endpoint or comparable EDR</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Intune for mobile device management and compliance</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Purview (Insider Risk Management, DLP, eDiscovery, Audit)</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Sentinel (KQL, analytics rules, workbooks)</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Splunk (SPL, dashboards, correlation searches)</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Microsoft Azure and Entra ID security stack </span></li> </ul> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Demonstrated experience executing incident response across the full lifecycle — preparation, identification, containment, eradication, recovery, and lessons learned. </span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Excellent written and oral communication skills, including documenting investigations in a service management ticketing system. </span></li> </ul> <p style="margin:0.0in;font-family:Arial;font-size:12.0pt;color:black"> </p> <p style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"> </p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Preferred Qualifications</b></H2> </div><div><ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Scripting capability in PowerShell, KQL, or Python to accelerate investigations and automate routine tasks.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Experience supporting insider threat investigations in coordination with HR/Legal.</span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">One or more certifications, or similar: SC-200, SC-400, AZ-500, MS-500, Security+, GCIH, GCIA, GCFA, GMON, CySA+, or CISSP. </span></li> <li style="margin-top:0.0;margin-bottom:0.0;vertical-align:middle;color:black"><span style="font-family:Arial;font-size:12.0pt;background-color:white">Self-motivated, able to work independently, and committed to continuous learning of best practices in cyber security. </span></li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Physical Requirements</b></H2> </div><ul style="margin-top:0.0;margin-bottom:0.0"></ul></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>Working Conditions</b></H2> </div><ul style="margin-top:0.0;margin-bottom:0.0"></ul></div></div><p style="margin-bottom:12.0px;text-align:start"> </p> <p style="margin-bottom:12.0px;text-align:start"><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><span style="color:#000000"><span style="font-style:normal"><span style="white-space:normal"><span style="background-color:#ffffff"><strong style="font-weight:bold">We want you to know</strong></span></span></span></span><br><span style="color:#000000"><span style="font-style:normal"><span style="white-space:normal"><span style="background-color:#ffffff">Being a part of the CenterPoint Energy team is more than a career alone. It's an opportunity to make a positive impact. You will be an integral part of enabling everyday life and the pursuit of possibilities for the customers we serve and the communities we share. The vital services we provide are at the core of making our world work, and by sharing your energy with us, we'll create a better tomorrow together. </span></span></span></span></span></span><br> </p> <p style="margin-bottom:12.0px;text-align:start"><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><strong>What we bring to you</strong></span></span></p> <ul> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Competitive pay</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Paid training</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Benefits eligibility begins on your first day</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Transit subsidies</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Flexible work schedule, paid holidays and paid time off</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Access to discounts at fitness clubs and an on-site wellness center at our headquarters in Houston</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">Professional growth and development programs including tuition reimbursement</span></span></li> <li><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">401(k) Savings Plan featuring a company match dollar-for-dollar up to 6% and a company contribution of 3% regardless of your contribution</span></span></li> </ul> <p> </p> <p><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif"><strong>Job Type:</strong> Full Time <br><strong>Posting Start Date:</strong> 07/08/2026​<br><strong>Posting End Date:</strong> 07/31/2026</span></span></p> <p><br><span style="font-size:16.0px"><span style="font-family:Arial, Helvetica, sans-serif">This contractor and subcontractor shall abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability.</span></span></p> <p><span style="font-size:8.0px"><span style="font-family:Arial, Helvetica, sans-serif">#LI-CNP</span></span></p>