Cyber Security Analyst, Security Operations, Progression

TECO Energy

Lutz (FL)

On-site

USD 80,000 - 120,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Competitive Salary

401k match

Pension plan

Paid time off

Medical & Dental coverage

Tuition assistance

Employee assistance program

Wellness programs

On-site fitness centers

Bonus plan

Job summary

Tampa Electric is seeking a Cyber Security Specialist Associate to help monitor security systems, ensuring daily, weekly, and annual procedures are followed. You will support threat detection, incident response, and forensics across TECO Energy networks and assets.

Collaboration within the Cyber Fusion Center is key. Responsibilities include analyzing threats, maintaining regulatory compliance (NERC CIP, SOX, PCI), and contributing to security program improvements.

Qualifications

High School diploma or equivalent required.
Bachelor's degree in Computer Science, Information Systems, or IT related field preferred.
Experience with cyber security, IT security, or related fields desired.

Responsibilities

Translate standards into systemic solutions to enable compliance.
Evaluate and strengthen security controls and tools used by the Cyber Fusion Center.
Monitor security threats and respond to events; escalate as needed.
Conduct digital forensics and malware analysis to gather IOCs and support investigations.
Monitor external sources for security intelligence and incidents.
Develop threat metrics and security processes; maintain desk procedures.

Skills

Security operations

Threat detection

Incident response

Forensics

Regulatory compliance

Education

High School Diploma or equivalent

Bachelor's Degree in CS/IT/related field

Tools

SIEM

Firewalls

IDS/IPS

DLP

Job description

At Tampa Electric, dependable electricity starts with dedicated individuals whose talent, skill and passion drive our success. We’ve been lighting the way for West Central Florida for more than 125 years—and we’re just getting started.

Join us and build a rewarding career with competitive pay, comprehensive benefits and a culture that supports your growth. Your potential finds its purpose at Tampa Electric.

We proudly deliver 99.98% electric service reliability to nearly 860,000 customers across 2,000 square miles of Hillsborough County and parts of Polk, Pasco and Pinellas counties. Through innovation and strategic investments, we’re creating a cleaner, brighter energy future—whiledelivering exceptional service every step of the way.

We reflect the communities we serve and foster a workplace where every employee feels welcomed, valued and engaged. Join our team of energy experts and help shape the future of power.

Storm Duty Requirements

Tampa Electric and its sister companies serve a role in providing critical services to our community during an emergency. Team members are required to participate in the response/recovery activities related to emergencies/disasters to maintain service to our Tampa Electric customers. Team members are required to work in their normal job duties or other assigned activities. Proper compensation will be made in accordance with the company's rules and procedures.

Responding to storms will be considered a condition of employment.

Equal Opportunity Employer Statement

Tampa Electric is proud to be an Equal Opportunity Employer.

Job Details - Cyber Security Analyst, Security Operations, Progression

Title: Cyber Security Analyst, Security Operations, Progression
Company: Tampa Electric Company
Location: Bearss Operations Center
State and City: Florida - LUTZ
Shift: 8 Hr. X 5 Days
Hiring Manager: Marc Imhof

Position Concept

The Cyber Security Specialist Associate is responsible for assisting with monitoring the company’s information security systems, ensuring that all procedures are followed on a daily, weekly, monthly, and annual basis. Provide support, within a team environment, for systems used to monitor and protect the enterprise assets. Detect, analyze, and respond to any suspicious cyber security activity across TECO/Emera business and operational networks, including all network infrastructure, operating systems, and server platforms throughout TECO Energy and its subsidiaries. Develop an in-depth understanding of exploits (e.g., malware) and vulnerabilities, resolving issues by taking the appropriate corrective action, or following the appropriate escalation procedures. Assist with identifying and assessing threats to TECO’s network and data, monitoring TECO’s network for malicious activity, investigating intrusions and other relevant events, and has a maintaining a sophisticated and detailed understanding of the evolving threat landscape, includes assessing enterprise assets to include critical assets for secure configurations and maintaining and enforcing regulations regarding NERC Critical Infrastructure Protection (CIP), Sarbanes‑Oxley (SOX), PCI, and corporate information security standards.

Primary Duties and Responsibilities

Translate all applicable standards and requirements (NERC CIP, NIST 800-171, NIST 800-53, PCI-DSS, SOX, etc.) into appropriate systemic and procedural solutions to enable compliance adherence. Coordinate and communicate necessary actions to maintain compliance with applicable internal and regulatory standards. Assist in the development and enforcement of company policies, procedures, desk level procedures, disaster recovery plans, processes, plans and standards that support and facilitate governmental and regulatory compliance. Assist in developing management responses to internal/external government and regulatory audits and data requests with respective management and staff. (20%)
Evaluate the effectiveness of in-place security controls to constantly strengthen the overall security posture. Recommend implementation of countermeasures or mitigating controls and contribute to design, implement, and maintain security tools, systems, and technologies leveraged by the CFC (Cyber Fusion Center), TSA, or NERC CIP program. (20%)
Monitor and respond to security threats and/or events generated by various security monitoring tools/technologies for the enterprise network. Determine if anomalies are actual system compromises. Escalate significant threats/events to 2nd or 3rd tier support for deeper analysis. Ensure all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment. (15%)
Conduct digital forensics by collecting computer/network-related evidence in support of policy violations, criminal activity, fraud, and in response to threat intelligence, law enforcement investigations, or information technology (IT) audit efforts (NERC CIP, SOX, PCI, etc.). Conduct malware analysis to gather relevant indicators of compromise (IOCs) for active hunting and continuous monitoring for installed toolsets. (15%)
Monitor external event sources for security intelligence and actionable incidents. (15%)
Develop and maintain threat/risk metrics, security processes, and desk level procedures. (15%)

Qualifications

Education
Required: High School Diploma or equivalent.
Preferred: Bachelor’s Degree in Computer Science, Information Systems, or other IT related discipline.

Licenses/Certifications
Required: From the list of certification vendors, one related Information Security professional certification or ability to obtain via self‑study within one year of hire date (e.g., (ISC)², GIAC, ISACA, CompTIA, e‑Council, etc.).
Preferred: ITIL v3 and one or more of the following or similar Information Security professional certifications (ex: ACE, CCE, CEH, CISA, CISM, CISSP, CRISC, EnCE, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCWN, GICSP, GMON, GNFA, GPEN, GPPA, GREM, GWAPT, GXPN, OSCP, SSCP).

Related Experience
Required: 5 years of related Cyber Security, IT experience or Technical (hands‑on networking, telecommunications such as radios, satellites, communications, hardware, software or experience). May consider a degree in lieu of experience. An Associate’s degree in Computer Science, Information Systems or other IT related discipline and 3 years of experience or a Bachelor’s in Computer Science, Information Systems or other IT related discipline and 1 year of experience. Experience may include up to one year of demonstrated IT experience, within a formal college/university internship or co‑op program.

Knowledge, Skills, and Abilities
Required:

Good working knowledge of major operating system security (Windows, Mac OS, Linux/Unix), endpoint, server, and network security.
Good working knowledge of major security systems and functions for incident response, monitoring and forensic activities: Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, NetFlow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP.
Good working knowledge of log, network, and system forensic investigation techniques.
Basic working knowledge of networking protocols and systems administration.
Basic working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents.
Basic working knowledge with packet analysis and malware analysis.
Basic working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI.
Good analytical and risk assessment skills and strong listening, written and computer communication skills for reporting and auditing purposes.

Preferred:

Good working knowledge of major security systems and functions for incident response, monitoring, and forensic activities: Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, NetFlow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP.
Good working knowledge of networking protocols and systems administration.
Good working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents.
Good working knowledge with packet analysis and malware analysis.
Good working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI.
Basic knowledge of penetration testing technologies and procedures.
Basic knowledge with reverse engineering malware.
Strong analytical and risk assessment skills and strong listening, written and computer communication skills for reporting and auditing purposes.

Working Conditions

Normal working conditions with occasional extended hours during the week and weekends.

Physical Demands/Requirements

Normal physical demands related to an office and operational (Power Plant, Solar, Control Center) workplace environment.

Benefits

Competitive Salary
401k Savings plan with company matching
Pension plan
Paid time off
Paid Holiday time
Medical, Prescription Drug, & Dental Coverage
Tuition Assistance Program
Employee Assistance Program
Wellness Programs
On‑site Fitness Centers
Bonus Plan and more!