Cyber Security Analyst – NERC CIP

Cyber Security Analyst – NERC CIP

Contract Length: 7 months
Work Setup: 100% Remote

Remote Location Restrictions: Candidates cannot be located in California, Colorado, Illinois, Kentucky, Massachusetts, Montana, Nebraska, New York, Oregon, or Washington at this time.

The Cyber Security Analyst will monitor CIP-007 R2 patch management processes and tools.

Responsibilities

• Maintain and support the FirstEnergy Cyber Security Program, protecting all corporate cyber assets.

• Support FirstEnergy’s compliance with NERC CIP, protecting the Bulk Electric System.

• In conjunction with the team and other stakeholders, develop and maintain security baselines, procedures, and other strategies that effectively protect cyber assets while ensuring reliable and consistent system operations.

• Consult with Business Units and IT on security and protection measures of systems and information during the design and implementation of on-premise and cloud/SaaS solutions.

• Participate in the Cyber Incident Response process.

• Aid in the development and maintenance of the Security Awareness Training program.

• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services.

• Support the implementation of Corporate Cyber Security capital projects by assisting with the implementation of devices; evaluating vendor solutions; assisting with coordination of vulnerability assessment activities; and assisting with review of programs, policies, procedures, and standards in relation to cyber security best practices.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, or similar discipline is preferred. A bachelor’s degree in another field with relevant industry experience in cyber/information security will be considered.

• Four to seven years of professional work experience in cyber or information security, or in another IT discipline where cyber or information security was a significant portion of the position’s responsibility.

• Effective communication skills, including creating and delivering presentations, briefs, and training sessions. Must compose well-written, professional documents and reports with minimal editorial and proofing support.

• Ability to translate technical output from systems and assessment tools into understandable reports and action plans.

• Ability to work effectively with people at varying levels within an organizational hierarchy to accomplish tasks and goals.

• Ability to work independently within a set of objectives, procedures, and parameters to accomplish project tasking. Able to lead ad-hoc project task teams and other workgroups to accomplish project tasks, resolve issues, and lead/communicate important changes.

• Able to participate in an on-call rotation (cycling weekly), responding to out-of-hours calls and alerts in support of security response, including infrequent on-site response out-of-hours.

• Ability to travel on a frequent basis to other FirstEnergy buildings in the Akron area. Infrequent overnight business travel to locations throughout the FirstEnergy service territory (OH, PA, NJ, MD, WV) will be required of this position.

• Experience in hands-on operation and administration of one or more standard IT discipline areas (Windows, Linux/Unix, Networking, etc.) in a professional setting is preferred.

• Holding a security-related certification such as CISSP, GIAC GSEC, etc. is preferred.