Cyber Security Systems Administrator - Cyber Security & TSOC - Akron FirstEnergy Headquarters

FirstEnergy Corp; Akron (OH); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Pension plan

401(k) matching

Medical, dental, and vision insurance

Tuition reimbursement

Job summary

FirstEnergy Corp seeks a Cyber Security Engineer to support the Transmission Security Operations Center (TSOC). The role focuses on SIEM platform design, deployment, and optimization with enterprise-wide security monitoring, threat detection, and incident response.

You will work with security operations, infrastructure, and business stakeholders to improve visibility and automate detections. It is based in Akron, OH with flexible work location options.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Cyber Analytics or similar discipline.
• Experience engineering and administering enterprise SIEM platforms.
• Scripting in Linux and/or Windows to automate tasks.
• Knowledge of TCP/IP, operating systems hardening and monitoring.
• Experience with IT systems and networking infrastructure.
• Familiarity with standards such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK is a plus.
• Experience with regulations such as NERC CIP is a plus.

Responsibilities

• Engineer, implement, administer, patch and improve SIEM platforms and related monitoring capabilities.
• Evaluate, design, test and deploy cybersecurity technologies including SIEM, SOAR, and cloud security.
• Lifecycle management: architecture, upgrades, patching, optimization, and operations.
• Develop standards, reference architectures, configuration baselines and integration patterns.
• Design automation, detection engineering and incident response capabilities.
• Collaborate with TSOC, cybersecurity, IT and business teams to deliver secure solutions.
• Support cybersecurity incidents including investigation, containment and recovery.
• Participate in on-call rotations and ensure compliance with policies and standards.

Skills

SIEM engineering

Security monitoring

Threat detection

Incident response

Log onboarding

Education

Bachelor's degree in Cybersecurity/CS

Tools

SIEM platforms

Job description

FirstEnergy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers' lives brighter, the environment better and our communities stronger.FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

About the Opportunity

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]This position's base reporting location is in Akron, Ohio, with significant flexible work location opportunities. This position is within FirstEnergy's Cyber Security Operations and reports to the Manager of TSOC Technologies. As a Cyber Security Engineer supporting the Transmission Security Operations Center (TSOC), you will serve as a subject matter expert for Security Information and Event Management (SIEM) platforms that enable enterprise-wide security monitoring, threat detection, and incident response. You will be responsible for the design, implementation, integration, optimization, administration, and support of SIEM technologies and associated security data pipelines. Additionally, you will work closely with cyber security operations, infrastructure, application, and business stakeholders, to develop solutions that improve security visibility, automate detection capabilities, and strengthen FirstEnergy's cyber defense strategy.The successful candidate will have significant hands-on experience engineering and administering enterprise SIEM platforms, including log source onboarding, use case development, correlation rule creation, platform integration, and lifecycle management. This role requires a strong engineering mindset, exceptional problem-solving skills, and the ability to architect scalable and reliable cybersecurity solutions while effectively managing projects and collaborating across multiple teams.

Responsibilities

• Primary responsibility will be to engineer, implement, administer, patch, maintain, and continuously improve FirstEnergy's Security Information and Event Management (SIEM) platforms and related security monitoring capabilities.
• Assist with evaluation, design, testing, and deployment of cybersecurity technologies, including SIEM, SOAR, threat intelligence, cloud security, and other enterprise security solutions supported by the team.
• Perform platform lifecycle management, including architecture, implementation, upgrades, patching, optimization, performance tuning, and operational support.
• Develop and maintain technical standards, reference architectures, configuration baselines, integration patterns, and engineering documentation.
• Design and implement automation, orchestration, detection engineering, and response capabilities to improve security operations and incident response effectiveness.
• Perform technical activities including requirements analysis, solution design, proof-of-concept development, testing, deployment planning, and operational transition.
• Serve as a cybersecurity subject matter expert (SME), providing technical guidance and consultation to TSOC, Cybersecurity, IT, and business stakeholders.
• Collaborate with architecture, infrastructure, cloud, network, endpoint, identity, operational technology, and application teams to deliver secure, scalable, and supportable solutions.
• Participate in complex cybersecurity technology projects from requirements gathering through design, deployment, testing, operational transition, documentation, and continuous improvement.
• Work with vendors to obtain product updates, bug fixes, support engagement, and issue resolution.
• Create and maintain clear, accurate, and comprehensive technical and operational documentation.
• Support and provide technical expertise during cybersecurity incidents, including investigation, containment, recovery, and post-incident improvement activities.
• Respond to support requests that are escalated to the team.
• Participate in an On-Call rotation to support after-hours operational issues and cybersecurity incidents.
• Ensure compliance with applicable corporate policies, regulatory requirements, and cybersecurity standards.

Qualifications

• A bachelor's degree in Cybersecurity, Computer Science, Cyber Analytics or similar discipline is preferred. A bachelor's degree in another field with relevant industry experience in cyber/information security will be considered.
• Working knowledge and/or experience in engineering, administering, and maintaining enterprise SIEM platforms, including configuring integrations upstream and downstream for ingestion and correlation activities.
• Experience developing, maintaining, and troubleshooting scripts in Linux and/or Windows environments to automate administrative and operational tasks.
• Knowledge of operating systems internals, hardening, and monitoring (Windows and UNIX).
• Experience in designing, deploying, and/or supporting enterprise-scale security solutions.
• Experience in IT systems and/or networking infrastructure is required.
• In-depth understanding of TCP/IP network fundamentals is required.
• Strong troubleshooting skills are required.
• Must compose well-written, professional documents and reports.
• Effective business communication skills which include documentation and project status communication.
• Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain, etc. are a plus.
• Experience with Compliance regulations, such as NERC CIP, is a plus.

Benefits, Compensation & Workforce Diversity

At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time.

Safety

Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards.

Position Classification

Exempt FirstEnergy Human Resources Team