Cybersecurity Analyst

Shenandoah Valley Electric Cooperative, Inc.; Virginia; On-site; USD 75,000 - 101,000; Full time

Job summary

Shenandoah Valley Electric Cooperative is seeking a Cybersecurity Analyst to monitor and protect the cooperative’s networks, systems and data. You will install and maintain security software, establish baseline configurations and document security issues.

You will stay current on attackers’ methods, promote cyber-safety awareness, perform risk assessments, conduct vulnerability scans, and work with staff and third parties to minimize risk.

Qualifications

• Bachelor’s degree in cybersecurity or other related IT field or related experience and/or training or equivalent.
• Certified Ethical Hacker certification is preferred.
• Previous working experience with a security information and event monitoring solution and reviewing Windows logs.

Responsibilities

• Develop, implement and maintain the company’s security documents (policies, standards, guidelines and procedures).
• Develop, document and verify security baseline configurations on cooperative-owned assets.
• Create a culture of security awareness by leading and enhancing cyber safety training.
• Maintain and manage the security information and event monitoring solution to monitor server logs, firewall logs and network traffic for unusual or suspicious activity.
• Administrate and maintain the antivirus/endpoint detection and response solution.
• Monitor the IPS/IDS for anomalous traffic patterns.
• Perform risk assessments and testing of enterprise technology infrastructure.
• Perform vulnerability scanning and provide recommendations to mitigate discovered vulnerabilities.
• Analyze cooperative business requirements and provide objective advice on the use of enterprise security solutions.
• Maintain, update and mitigate vulnerabilities within the cooperative’s risk registry.
• Facilitate penetration testing and follow through with all mitigating actions.
• Implement security improvements by assessing current situations and evaluating trends.
• Create, maintain and disseminate system documentation and standard operating procedures for network and other duties.
• Work with all cooperative employees to realize enterprise approach to security.
• Work with third parties accessing enterprise infrastructure to promote awareness and minimize risk to the cooperative.
• Understand the latest attack techniques and propose appropriate countermeasures.
• Assist in special projects, as necessary.

Job description

To monitor and protect the cooperative’s network(s), computers systems and data from security issues, install/maintain security software, establish baseline configurations, document any security issues or incidents found and promote cyber-safety awareness and best practices. The Cybersecurity Analyst is expected to stay up to date on the latest intelligence, including hackers’ methodologies. To perform assigned functions according to standardized policies and procedures.

Reporting Relationships

Reports to: Director of Security and Enterprise Infrastructure

Directs: None

Responsibilities

• Develop, implement and maintain the company’s security documents (policies, standards, guidelines and procedures.)
• Develop, document and verify security baseline configurations on cooperative-owned assets.
• Create a culture of security awareness by leading and enhancing cyber safety training.
• Maintain and manage the security information and event monitoring solution to monitor server logs, firewall logs and network traffic for unusual or suspicious activity.
• Administrate and maintain the antivirus/endpoint detection and response solution.
• Monitor the IPS/IDS for anomalous traffic patterns.
• Perform risk assessments and testing of enterprise technology infrastructure.
• Perform vulnerability scanning and provide recommendations to mitigate discovered vulnerabilities.
• Analyze cooperative business requirements and provide objective advice on the use of enterprise security solutions.
• Maintain, update and mitigate vulnerabilities within the cooperative’s risk registry.
• Facilitate penetration testing and follow through with all mitigating actions.
• Implement security improvements by assessing current situations and evaluating trends.
• Create, maintain and disseminate system documentation and standard operating procedures for network and other duties.
• Work with all cooperative employees to realize enterprise approach to security.
• Work with third parties accessing enterprise infrastructure to promote awareness and minimize risk to the cooperative.
• Understand the latest attack techniques and propose appropriate countermeasures.
• Assist in special projects, as necessary.

Education and Experience

• Bachelor’s degree in cybersecurity or other related IT field or related experience and/or training or equivalent.
• Certified Ethical Hacker certification is preferred.
• Previous working experience with a security information and event monitoring solution and reviewing Windows logs.

Required Skills and Abilities

• Must be able to maintain professionalism and control under all circumstances.
• Has and maintains a valid driver’s license and acceptable driving record and is able to operate SVEC vehicles.
• Must become and remain certified in CPR and first aid. Must also be skilled in the use of all safety equipment.
• Proficient in Microsoft Office products including Excel and Word.
• Strong verbal, written, analytical and interpersonal skills.
• Ability to dissect and resolve complex problems quickly and systematically.
• Organized, keen attention to detail, and efficient.
• Ability to conduct research into IT security issues and products as required.
• Analytical/logical thinking ability.
• Ability to assemble facts in a clear, understandable manner.
• Team-oriented and skilled in working within a collaborative environment.
• Maintain high level of confidentiality with regards to associate, member and corporate information.
• Possess effective techniques to research and access all sources necessary to fulfill position responsibilities.
• Must have access to reliable transportation to and from work.

Physical Requirements

• Participation in SVEC job safety and training programs, relevant workshops, seminars and other SVEC-sponsored courses and events.
• Must be able to use office equipment including telephone, computer and other systems and related software in the performance of position responsibilities.
• Must be able and available, during all types of weather conditions, to work weekends, holidays, evenings and other times outside normal duty hours to assist in service restoration and other emergencies that may arise or when the workload demands.
• Must always maintain an operating telephone or personal communication device at their place of residence. Ability to contact the telephone or personal communication device must be made available to SVEC for the purpose of contacting the manager to conduct legitimate routine and/or emergency business.
• This position is primarily inside work. Must be able to work up to eight hours per day at a computer.
• This position involves primarily inside work. Must be able to lift objects unassisted (up to 30 pounds). Some standing, walking, climbing, balancing, stooping, kneeling, crouching or crawling to a minimal degree.

Pay Range

$75,439.26 - $100,900.02 annually

Actual compensation within this range will be based on the applicant’s experience, education and relevant certifications.

The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel so classified.

Notice of Equal Opportunity Employment

In order for Shenandoah Valley Electric Cooperative to abide by its Affirmative Action Statement, the Cooperative publishes the following Equal Employment Policy. This is not a solicitation of applicants for employment. All applicants for employment shall be considered and hired on the basis of merit, without regard to race, color, national origin, age, disability, and where applicable, sex (including gender identity and expression), marital status, familial status, parental status, religion, sexual orientation, genetic information, political beliefs, reprisal, or veteran’s status. The employment practices shall ensure equal treatment of all employees, without discrimination in rates of pay or other opportunities for advancement because of an employee’s race, color, national origin, age, disability, sex, gender identity, religion, reprisal, and where applicable, political beliefs, marital status, familial or parental status, sexual orientation, or all or a part of an individual’s income is derived from any public assistance program, or protected genetic information in employment or in any program or activity. (Not all prohibited bases will apply to all programs and/or employment activities.) Shenandoah Valley Electric Cooperative is an equal opportunity provider and employer.