Info Security Engineer I

Duquesne Light Company; Pittsburgh (Allegheny County); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Duquesne Light Company in Pittsburgh is seeking an Information Security Engineer I to strengthen our cybersecurity program with a focus on NERC CIP compliance, SIEM operations, and incident response. The role protects critical infrastructure and collaborates with stakeholders to improve cyber resilience.

Candidates should have 7+ years of related experience and hands-on experience with SIEM (Splunk) and configuration monitoring.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering or a related field, or equivalent professional experience, required.
• Seven (7) or more years of experience in cybersecurity engineering, security operations or compliance-focused security roles, required.
• Hands‑on experience with SIEM technologies, such as Splunk, required.
• Experience with configuration monitoring and file integrity monitoring tools, including Tripwire Enterprise or equivalent solutions, required.

Responsibilities

• Conduct risk assessments and gap analyses related to NERC CIP requirements and cybersecurity leading practices.
• Administer, monitor and optimize SIEM platforms to support threat detection, alerting, log correlation and incident investigation.
• Develop and tune SIEM use cases, correlation rules, dashboards and reporting capabilities.
• Provide technical guidance, knowledge sharing and operational support to junior security analysts and engineers.
• Collaborate with infrastructure, network, application and operations teams to improve system hardening and secure configuration practices.
• Support and maintain compliance with applicable NERC CIP standards across enterprise and operational technology environments.
• Participate in NERC CIP audits, assessments, evidence collection, remediation tracking and compliance reporting activities.
• Collaborate with internal stakeholders to implement and maintain cybersecurity controls aligned with regulatory and organizational requirements.
• Assist in the development, review and maintenance of cybersecurity policies, standards, procedures and technical documentation.
• Analyze security events and alerts to identify indicators of compromise, suspicious activity or policy violations.
• Integrate log sources from enterprise and OT systems into centralized monitoring platforms.
• Manage and support configuration monitoring and file integrity monitoring solutions.
• Develop and maintain baselines for critical cyber assets and monitor for unauthorized changes.
• Investigate configuration drift, integrity violations and security exceptions.
• Participate in cybersecurity incident response activities, including detection, triage, containment, eradication, recovery and post-incident analysis.
• Support incident investigations involving enterprise and OT/ICS environments.
• Maintain incident response documentation, playbooks and lessons-learned reports.
• Assist in coordinating tabletop exercises and cybersecurity readiness activities.
• Participate in cross-functional cybersecurity projects and strategic initiatives.
• Participate in an on-call rotation for cybersecurity incidents and operational support.

Skills

Incident response

Network security

System hardening

Vulnerability management

Access control

NIST/CIS/IEC frameworks

EDR/Threat intel

Analytical skills

Communication

Collaboration

Mentoring

Education

Bachelor's degree in Information Security

Tools

Splunk

Tripwire Enterprise

Job description

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team!

Summary

The Information Security Engineer I supports and enhances the Company's cybersecurity program, with a strong emphasis on North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) compliance, security information and event management (SIEM), configuration monitoring and incident response. The position safeguards critical infrastructure systems, supports regulatory compliance activities, monitors enterprise and operational technology security controls, and provides technical guidance and knowledge sharing to junior cybersecurity personnel.

The role applies hands‑on cybersecurity engineering experience across industrial control system (ICS), operational technology (OT) and enterprise environments and works collaboratively with business and technical stakeholders to strengthen cyber resilience.

Location

Location: Pittsburgh, PA (Hybrid) Nova Place

Responsibilities

• Conduct risk assessments and gap analyses related to NERC CIP requirements and cybersecurity leading practices.
• Administer, monitor and optimize SIEM platforms to support threat detection, alerting, log correlation and incident investigation.
• Develop and tune SIEM use cases, correlation rules, dashboards and reporting capabilities.
• Provide technical guidance, knowledge sharing and operational support to junior security analysts and engineers.
• Collaborate with infrastructure, network, application and operations teams to improve system hardening and secure configuration practices.
• Support and maintain compliance with applicable NERC CIP standards across enterprise and operational technology environments.
• Participate in NERC CIP audits, assessments, evidence collection, remediation tracking and compliance reporting activities.
• Collaborate with internal stakeholders to implement and maintain cybersecurity controls aligned with regulatory and organizational requirements.
• Assist in the development, review and maintenance of cybersecurity policies, standards, procedures and technical documentation.
• Analyze security events and alerts to identify indicators of compromise, suspicious activity or policy violations.
• Integrate log sources from enterprise and OT systems into centralized monitoring platforms.
• Manage and support configuration monitoring and file integrity monitoring solutions.
• Develop and maintain baselines for critical cyber assets and monitor for unauthorized changes.
• Investigate configuration drift, integrity violations and security exceptions..
• Participate in cybersecurity incident response activities, including detection, triage, containment, eradication, recovery and post-incident analysis.
• Support incident investigations involving enterprise and OT/ICS environments.
• Maintain incident response documentation, playbooks and lessons-learned reports.
• Assist in coordinating tabletop exercises and cybersecurity readiness activities.
• Participate in cross-functional cybersecurity projects and strategic initiatives.
• Participate in an on-call rotation for cybersecurity incidents and operational support.

Additional Responsibilities

• Perform other job-related duties as assigned
• Storm team duties as assigned

Education and Experience Required

• Bachelor's degree in Information Security, Computer Science, Engineering or a related field, or equivalent professional experience, required.
• Seven (7) or more years of experience in cybersecurity engineering, security operations or compliance-focused security roles, required.
• Hands‑on experience with SIEM technologies, such as Splunk, required.
• Experience with configuration monitoring and file integrity monitoring tools, including Tripwire Enterprise or equivalent solutions, required.

Preferred Qualifications

• Experience in electric utility, energy, industrial control system or operational technology environments preferred.
• Experience supporting or implementing NERC CIP compliance programs preferred.
• Experience supporting regulatory audits and compliance evidence management preferred.
• Experience managing or supporting infrastructure or network systems, such as server or network administration, preferred.
• Industry certification such as CISSP, GCIH, GCIA, Security+, CEH or a Splunk certification preferred.

Skills/Abilities

• Knowledge of cybersecurity incident response processes and methodologies.
• Understanding of network security, system hardening, vulnerability management and access control principles.
• Familiarity with cybersecurity frameworks such as the NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls or IEC 62443.
• Experience with endpoint detection and response, vulnerability management and threat intelligence platforms preferred.
• Strong analytical, troubleshooting and problem‑solving skills.
• Ability to interpret technical and regulatory requirements and translate them into practical cybersecurity controls and documentation.
• Ability to communicate clearly and effectively, verbally and in writing, with technical and nontechnical stakeholders.
• Ability to collaborate across cybersecurity, infrastructure, network, application, operations and compliance teams.
• Ability to mentor and support junior cybersecurity personnel through technical guidance and knowledge sharing.

EQUAL OPPORTUNITY EMPLOYER

Duquesne Light Holdings is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment. An integral part of Duquesne Light Holdings' commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Holdings is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at [e-mail] and describe the specific accommodation requested for a disability-related limitation.