> Markdown version of [/jobs/ext/1228458-cyber-soc-analyst-ii-email-and-endpoint-security](https://www.wearedevelopers.com/jobs/ext/1228458-cyber-soc-analyst-ii-email-and-endpoint-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber SOC Analyst II Email and Endpoint Security - **Company:** CenterPoint Energy - **Location:** Montgomery, AL, United States - **Experience:** Experienced - **Contract:** Temporary to permanent - **Skills:** Microsoft Windows, Microsoft Azure, CompTIA Security+, Cyber Security, Information Leak Prevention, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Issue Tracking Systems, Python (Programming Language), Microsoft Office, Windows PowerShell, Kusto Query Language, User Environment Management, Scripting, Office365, Microsoft InTune, Azure Security Center, Sender Policy Framework (SPF), Information Technology, Cybercrime, Microsoft Sentinel, Splunk - **Published:** July 10, 2026 - **Apply:** https://www.careerjet.com/job/usc0e3d0f03ae604f4c4ee72a33023a344/eaa ## About the Role Bachelor's degree in an IT-related field, or equivalent education and work experience., * 2-4 years of professional IT experience, with demonstrated hands-on time in information security, cyber incident response, or a Security Operations Center. * Working operational experience with many of the following platforms: * Proofpoint (Email Protection, TAP, TRAP) * Microsoft Defender for Office 365 and email security principles (SPF, DKIM, DMARC) * Microsoft Defender for Endpoint or comparable EDR * Microsoft Intune for mobile device management and compliance * Microsoft Purview (Insider Risk Management, DLP, eDiscovery, Audit) * Microsoft Sentinel (KQL, analytics rules, workbooks) * Splunk (SPL, dashboards, correlation searches) * Microsoft Azure and Entra ID security stack * Demonstrated experience executing incident response across the full lifecycle - preparation, identification, containment, eradication, recovery, and lessons learned. * Excellent written and oral communication skills, including documenting investigations in a service management ticketing system. Preferred Qualifications * Scripting capability in PowerShell, KQL, or Python to accelerate investigations and automate routine tasks. * Experience supporting insider threat investigations in coordination with HR/Legal. * One or more certifications, or similar: SC-200, SC-400, AZ-500, MS-500, Security+, GCIH, GCIA, GCFA, GMON, CySA+, or CISSP. * Self-motivated, able to work independently, and committed to continuous learning of best practices in cyber security. ## Description The CSOC Analyst II - Email & Endpoint Security is a member of the Cyber Security Operations Center (CSOC) team responsible for protecting CenterPoint Energy's users, email, endpoints, and mobile devices from advanced cyber threats. The analyst administers CenterPoint's email threat detection tools, insider risk platform, and mobile device security system. The ideal candidate has hands-on experience with Proofpoint, Intune, O365. Essential Functions * Serve as a Tier 2 escalation point for email security alerts originating from Proofpoint and Microsoft Defender for Office 365, performing header, URL, attachment, and payload analysis to determine scope of impact. * Monitor and triage mobile device security events and compliance violations in Microsoft Intune, including jailbroken/rooted devices, non-compliant configurations, and lost/stolen device response actions. * Investigate insider risk signals generated by Microsoft Purview Insider Risk Management and Data Loss Prevention (DLP) policies, partnering with HR, Legal, and the Insider Threat program as needed. * Partner with Security Engineering, Identity, Messaging, and End User Computing teams to recommend control improvements based on observed incidents and emerging threats. * Maintain situational awareness of the cyber threat landscape, especially threats targeting the energy sector and Microsoft 365 ecosystems, and translate intelligence into operational action., Overview: Kinder Morgan, one of North America's largest energy infrastructure companies, is looking for Cybersecurity Analyst. This position is responsible for supporting Ide… + 1 month ago, Job Title : IT - Medicaid - Cyber Security Analyst Job location : Montgomery, AL (Onsite) Duration : 12+ month contract with possibility for extension Job Responsibilities… + 1 hour ago + ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)