Cybersecurity & OT Analyst OR Senior Cybersecurity & OT Analyst - Robinson Nuclear Plant

Duke Energy; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Duke Energy is seeking an Ops Cybersecurity Analyst or Senior Ops Cybersecurity Analyst to support the Robinson Nuclear Plant Cybersecurity Program. The role focuses on identifying and mitigating cybersecurity threats, maintaining digital controls, and coordinating with multiple departments to ensure safe, reliable plant operation.

The analyst will manage security infrastructure, respond to incidents, and contribute to the Nuclear Cybersecurity Program while collaborating with stakeholders

Qualifications

• BS in Engineering, Cybersecurity, or CS plus 2+ years related experience
• Alternative: High School/GED plus 6+ years related experience
• Senior: BS in Engineering, Cybersecurity, or CS plus 5 years related experience
• Senior: High School/GED plus 9 years related experience

Responsibilities

• Manage and support cybersecurity infrastructure, including firewalls, data diodes, SIEM, industrial control systems, Microsoft products, hypervisors
• Install software patches on firewalls, data diodes, SIEM, and other digital assets
• Serve as technical lead and architect for common digital components, systems, and cybersecurity-related software
• Prepare new and maintain existing cybersecurity documentation
• Assess and respond to cybersecurity events and incidents
• Demonstrate basic knowledge of IT and cybersecurity policies, standards, processes, resources, and controls
• Provide technical and administrative support to other groups within the analyst's area of expertise
• Build positive relationships with various organizations and personnel
• Show willingness to accept new responsibilities and eagerness to learn new concepts and technologies

Skills

Cybersecurity

OT / ICS

PowerShell

Splunk

Networking

Education

Bachelor's degree in Engineering, Cybersecurity, or Computer Science

High School/GED

Tools

Splunk Enterprise SIEM

OWL data diodes

Firewalls

Data diodes

Job description

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

***This position can be hired as either an Ops Cybersecurity Analyst or Sr. Ops Cybersecurity Analyst depending on experience.***

Position Summary

This position will support the Robinson Nuclear Plant Cybersecurity Program and plant process computing network. Responsibilities include responding to cybersecurity threats and events, providing system ownership for digital-based components, supporting the installation base, supporting testing and commissioning for new installations, and maintaining existing digital systems. The cybersecurity program covers all infrastructure assets, including but not limited to firewalls, data diodes, SIEM, industrial control systems, and other digital assets included in the program.

This position is responsible for analyzing and implementing complex cybersecurity solutions that address real and potential threats specific to nuclear generation assets and equipment. The analyst will coordinate with other departments and the Nuclear General Office to ensure overall nuclear safety and reliable plant operation. Duties involve solving complex cybersecurity problems, participating in projects that impact cybersecurity, preparing cybersecurity assessments, hardening critical digital assets (CDAs), and performing other related activities.

The analyst will also contribute to the implementation of the Site's Nuclear Cybersecurity Program to maintain a strong cybersecurity posture and improve efficiency. This includes participating in industry working groups and building positive relationships with internal and external stakeholders. The individual will be required to pass site security access requirements including General Employee Training, Radiation Worker Training, Security Clearance checks, critical group membership, and will be subject to the site's Fitness for Duty Program. Periodic travel will be required.

Responsibilities

• Manage and support cybersecurity infrastructure, including team-owned digital platforms such as firewalls, data diodes, SIEM, industrial control systems, Microsoft products, hypervisors, etc.
• Install software patches on firewalls, data diodes, SIEM, and other digital assets.
• Serve as technical lead and architect for common digital components, systems, and cybersecurity-related software.
• Prepare new and maintain existing cybersecurity documentation.
• Assess and respond to cybersecurity events and incidents.
• Demonstrate basic knowledge of IT and cybersecurity policies, standards, processes, resources, and controls.
• Provide technical and administrative support to other groups within the analyst's area of expertise.
• Build positive relationships with various organizations and personnel.
• Show willingness to accept new responsibilities and eagerness to learn new concepts and technologies.

Basic/Required Qualifications

Note: This posting is for one open position. Dependent on relative experience, the level to which a candidate is aligned is outlined below.

• Cybersecurity & OT Analyst: Bachelor of Science in Engineering, Cybersecurity, or Computer Science AND two (2) years minimum required related experience
• Cybersecurity & OT Analyst: In lieu of degree and experience listed above, High School/GED AND six (6) years minimum required related experience
• Senior Cybersecurity & OT Analyst: Bachelor of Science in Engineering, Cybersecurity, or Computer Science AND five (5) years minimum required related experience
• Senior Cybersecurity & OT Analyst: In lieu of degree and experience listed above, High School/GED AND nine (9) years minimum required related experience

Preferred Qualifications

• Experience with the nuclear cybersecurity program, including NEI standards (NEI 08-09, NEI 13-10, and NEI 04-04).
• Experience with NIST cybersecurity controls.
• Demonstrated knowledge of technical and programmatic cybersecurity controls and protection strategies.
• Demonstrated knowledge of computer networks, servers, and cybersecurity appliances (firewalls, data diodes, SIEM).
• Experience with cybersecurity aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Working knowledge of Industrial Control Systems and Operational Technology (OT).
• Working knowledge of programming languages (e.g., PowerShell, VBA).
• Working knowledge of Splunk Enterprise SIEM.
• Working knowledge of OWL data diodes.
• Demonstrated ability to work effectively with personnel at all organizational levels (clients, staff, management, etc.).
• Strong project management and leadersh