Engineer, Cybersecurity Operations

National Rural Electric Cooperative Association; Arlington (VA); Hybrid; USD 90,000 - 110,000; Full time

Job summary

National Rural Electric Cooperative Association in Arlington, VA is seeking a cybersecurity professional to support the Cybersecurity Operations and Engineering team, monitor security events, coordinate incident response, and apply operational security practices with a hybrid schedule allowing work from home up to 2 days per week.

The role emphasizes monitoring tools, alert investigations, and collaboration with internal teams to deploy security solutions, with required 3+ years of security

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field preferred; equivalent technical training, certifications, or 3-4 years of relevant information technology experience will also be considered
• 3+ years of experience defining, implementing, and maintaining complex security infrastructure applications, including: Using ServiceNow ITSM or similar ticketing workflows to document, track, and resolve security-related work.
• Certifications Required: CompTIA Security+ or equivalent
• Certifications Preferred: GIAC Security Essentials (GSEC), GIAC Security Incident Handler (GCIH), or CompTIA CySA+ (Cybersecurity Analyst)

Responsibilities

• Monitors, triages, and investigates security tools, critical applications, and systems for suspicious activity, potential malicious behavior, security exploits, and data breaches.
• Provides backup and rotational 24/7 on-call support for security monitoring and incident response activities to meet response-time service levels and support real-time monitoring when required.
• Reviews, classifies, correlates, and analyzes security alerts and logs from SIEM platforms, servers, applications, endpoints, file systems, and network devices to identify threats and determine risk, severity, and appropriate response actions.
• Escalates and responds to security events according to risk and established response procedures.
• Configures, maintains, and tunes security monitoring, alerting, and operational security tools, including SIEM, EDR, cloud security, and other monitoring platforms.
• Deploys, tests, evaluates, and implements security solutions and infrastructure in partnership with internal technology teams, external vendors, and suppliers.
• Ability to report to the office when required

Skills

Security monitoring

Incident response

Threat detection

Collaboration

Education

Bachelor's degree in cybersecurity, information technology, computer science, or related field

Tools

ServiceNow ITSM

SIEM

EDR

Cloud security

Job description

NRECA is a unique national trade association providing advocacy, financial services and business support services to over 900 consumer owned electric cooperatives across the country. NRECA employees are united by our mission, inclusive culture, collaborative workplace and commitment to service excellence. As a "best place to work" employer, we operate with integrity, transparency and a spirit of innovation.

Join IT at NRECA where we are more than a team, we are a community. Guided by the core tenets of Simplicity, Security, Continuity, Transparency, and Flexibility, we strive to deliver business value through collaboration, ideation, and innovation. Become an integral part of a community driven to continuously improve our processes and transform how we work - in partnership with our colleagues and in service to our members.

Position Summary

The person in this role supports the Cybersecurity Operations and Engineering team by applying operational security practices, standards, technologies, and internal NRECA processes. They will coordinate security operations activities, including implementation of effective processes and deployment of security applications and infrastructure. They will monitor critical applications and systems, investigate security events, and respond to potential malicious activity, security exploits, or data breaches. This position is eligible for NRECA's hybrid schedule which allows flexibility to work from home up to 2 days per/week.

Key Responsibilities

• Monitors, triages, and investigates security tools, critical applications, and systems for suspicious activity, potential malicious behavior, security exploits, and data breaches.


• Provides backup and rotational 24/7 on-call support for security monitoring and incident response activities to meet response-time service levels and support real-time monitoring when required.


• Reviews, classifies, correlates, and analyzes security alerts and logs from SIEM platforms, servers, applications, endpoints, file systems, and network devices to identify threats and determine risk, severity, and appropriate response actions.


• Escalates and responds to security events according to risk and established response procedures.


• Configures, maintains, and tunes security monitoring, alerting, and operational security tools, including SIEM, EDR, cloud security, and other monitoring platforms.


• Deploys, tests, evaluates, and implements security solutions and infrastructure in partnership with internal technology teams, external vendors, and suppliers.


• Ability to report to the office when required

Qualifications

Formal Education Required

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field preferred; equivalent technical training, certifications, or 3-4 years of relevant information technology experience will also be considered

Experience and Certifications Required

• 3+ years of experience defining, implementing, and maintaining complex security infrastructure applications, including:
  
  
  
  • Using ServiceNow IT Service Management (ITSM) or similar ticketing workflows to document, track, and resolve security-related work.
  
  
  • Collaborating with internal and external stakeholders to validate detections, coordinate response actions, and support remediation efforts.
  
  
  
  


• Certifications Required: CompTIA Security+ or equivalent

Preferred Qualifications

• Certifications Preferred: GIAC Security Essentials (GSEC), GIAC Security Incident Handler (GCIH), or CompTIA CySA+ (Cybersecurity Analyst)

Salary Range: $90,000-$110,000 annual salary

Final compensation determined by individual qualifications, experience, and internal equity.

Essential Physical Requirements

• The worker is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal and extensive reading.


• Exerting up to 20 pounds of force occasionally, and/or up to 10 pounds of force frequently, and/or a negligible amount of force constantly to move objects. If the use of arm and/or leg controls requires exertion of forces greater than that for sedentary work and the worker sits most of the time, the job is rated for light work.

Disclaimer Statement: The preceding job description has been written to reflect management's assignment of essential functions. It does not prescribe or restrict the tasks that may be assigned.

Additional Requirement

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

NRECA is committed to working with and providing reasonable accommodation to individuals with physical and mental disabilities. If you need special assistance or an accommodation while seeking employment, please e-mail [e-mail] or call: 703-907-5992 - NRECA Arlington Human Resources. Please call 402-483-9275 - NRECA Lincoln Human Resources, for Lincoln, NE employment opportunities. We will make a determination on your request for reasonable accommodation on a case-by-case basis.

The U.S. Equal Employment Opportunity Commission (EEOC) recently released the 'Know Your Rights' poster, which updates and replaces the previous "EEO is the Law" poster and "EEO Is the Law Poster Supplement".

Pay Transparency Non-Discrimination. NRECA will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. Please see the Pay Transparency Nondiscrimination Provision for more information.

E-Verify. As a Federal Contractor, NRECA is required to participate in the E-Verify Program to confirm eligibility to work in the United States. For information please click on the following link: E-Verify.

For more information about life at NRECA please visit www.Electric.coop.