Associate Cybersecurity Systems Engineering Analyst - Data Protection

Duke Energy; United States; Hybrid; USD 90,000 - 120,000; Full time

Job summary

Duke Energy is hiring a Cybersecurity Systems Engineer Analyst to support, maintain, and advance tools that generate cyber security events across a 24x7 CSOC. The role collaborates with peers and management to monitor managed systems, following CIRT guidance and security policies.

The Analyst will design and tune SIEM content, manage rules/signatures, and work with Windows and Linux servers to strengthen detection capabilities. The job requires strong communication and problem-solving skills.

Qualifications

• HS/GED with 2+ years related work experience.
• Bachelor's degree preferred in Cybersecurity, Information Security, Computer Science, Engineering, or tech field.

Responsibilities

• Support, maintain and develop tools to generate cyber security events and incidents.
• Operate in a 24x7 CSOC environment with cross-team collaboration.
• Develop content like dashboards, rules, filters, and reports for SIEM.
• Track threat actors/campaigns using intel and technical analysis.
• Research new exploits and cyber threats; tune rules to reduce false positives.

Skills

Cybersecurity concepts

SIEM/TI correlation

Windows/Linux scripting

Incident response

Networking fundamentals

Problem solving

Team player

Education

Bachelor's degree in Cybersecurity or related field

High School Diploma or GED

Tools

SIEM tools

Endpoint security tools

Connector appliances/Logger appliances

Job description

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Job Summary

The Cybersecurity Systems Engineer Analyst is responsible for support, maintenance and development of tools utilized to generate cyber security events and incidents across the Duke Energy environment. The Analyst will work closely with peers, other internal/external teams and management in a 24x7 Cybersecurity Operations Center (CSOC) environment. The Analyst is also responsible for following processes and procedures as defined by Cybersecurity leadership and the Computer Incident Response Team (CIRT). They will typically perform in a role similar to systems administrator with a focus on detection and correlation of cyber events related to managed systems.

Responsibilities

• Participate in the content generation related to operation of a Global Security Information and Event Management (SIEM) system, to include; ESM, Oracle, Connector appliances, SmartConnectors, Logger appliances, Windows and Linux servers and a variety of network and security related devices.
• Conduct functional testing to ensure continued operability of cybersecurity tool suite whil also coordinating with cyber defense team to manage and administer the update of rules and signatures for specialized cyber defense applications.
• Identify, develop and deploy content / events for an evolving SIEM infrastructure; including use cases that involve Dashboards, Active Channels, Reports, Rules, Filters, Trends, Metrics and Active Lists. Apply knowledge of ongoing and emergent cyberthreats related to network and endpoint vulnerabilities to establish criteria for event / alert generation and correlation.
• Track cyber threat actors/campaigns based off technical analysis and open source/third party intelligence.
• Research and track new exploits and cyber threats.
• Support the establishment, enhancement, and continual improvement of an integrated set of correlation rules, alerts, searches, reports, and responses related to supported cybersecurity tool suites.
• Assist in the maintenance (patching / upgrade), configuration and operation of Cybersecurity tools including Endpoint / Antivirus, SIEM loggers and connectors, and Network analysis and defense products.
• Enhance and tune product events and other cyber event correlation rules to reduce false positives. Ensure deployment of supported product set over entire threat surface.
• Provide 24x7 Systems Engineer for escalations on a rotating shift basis.

Basic/Required Qualifications

• High School/GED
• Minimum 2 years related work experience

Desired Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a technology-related field.
• Prior internship experience in Technology.
• Knowledge and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Demonstrated effective oral and written communication skills
• Demonstrated effective problem solving & analytical skills
• Team player, works well with others
• Direct background or exposure to cyber security
• General networking understanding and/or experience
• Windows and UNIX/Linux command line scripting experience and programming experience.
• Demonstrated understanding of the life cycle of cybersecurity threats and tools used to mitigate risk.
• Experience with malware analysis content logging / alerting, concepts and methods.
• Knowledgeable in the NIST Cybersecurity Framework
• Knowledge of data privacy regulations and frameworks such as GDPR, CCPA, etc
• Innovative - ability to recognize and seek improvement and efficiency opportunities
• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security data protection domain.

Working Conditions

Hybrid Mobility Classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees must live within a reasonable commute to their designated Duke Energy facility, not greater than 50 miles one way. Employees are expected to report to their assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek.

Specific Requirements

• HS/GED: 2 yrs work experience {required}
• Associates: 0 yrs work experience {preferred}
• Bachelors: 0 yrs work experience {preferred}

Travel Requirements

Not