Information Security Analyst III

Laveer Engineering; Cranberry Township (Butler County); Hybrid; USD 85,000 - 107,000; Full time

Benefits offered by this job

Medical benefits

Wellness programs

401(k) with Company Match

Paid vacations and holidays

Flexible work arrangements

Educational reimbursement

Job summary

Westinghouse Electric Company in Cranberry Township, PA seeks an Information Security Analyst III to identify, investigate, contain, and help resolve security incidents while improving enterprise detection. You will translate threat intelligence into monitoring workflows and act as a senior technical resource across IT, Legal, Data Privacy, and HR, reporting to the Global Incident Response Supervisor.

The role offers a hybrid work schedule and a base salary range of $85,200 to $106,500 per year,

Qualifications

• Bachelor's degree in information technology, computer science, information security, a related technical discipline, or equivalent education and relevant experience.
• 4+ years of cybersecurity experience in security operations, incident response, threat detection, detection engineering, threat intelligence, forensics, security automation, or related functions.
• Experience with incident response frameworks and methodologies, including NIST SP 800-61 and MITRE ATT&CK.
• Advanced experience with SIEM and SOAR platforms, security analytics, forensics, threat intelligence, and endpoint or cloud security technologies.
• Practical expertise with Microsoft security tools and applications, including Microsoft Defender and Microsoft Sentinel.
• Proficiency with one or more high-level programming or scripting languages, such as Python or PowerShell.

Responsibilities

• Respond to and investigate computer security incidents observing established incident response policies, plans, and procedures, including evaluation, scoping, containment, eradication, recovery, and post-incident analysis.
• Analyze problematic activity reported by security technologies and partners, including IT, HR, Legal, and Data Privacy, and maintain complete, accurate investigation case records.
• Develop, validate, implement, and maintain detection use cases, analytics, alerts, reports, and dashboards in security monitoring platforms to identify potential threats and vulnerabilities.
• Translate current threat intelligence and attacker tactics, techniques, and procedures into threat models, detection logic, investigation guidance, and response actions.
• Plan, test, tune, and refine detection content to improve accuracy, coverage, and operational value while reducing false positives and unnecessary analyst workload.
• Provide technical guidance to first responders and other security operations personnel during investigations and major incidents, including on-call support.
• Provide relevant, and audience-appropriate incident updates, investigation findings, risk assessments, metrics, and recommendations to partners and decision makers.
• Maintain the operational effectiveness and configuration of assigned security solutions, including Microsoft Defender, Microsoft Sentinel, SIEM, SOAR, forensic, and threat intelligence technologies.
• Collaborate with security operations, threat intelligence, engineering, architecture, and teams to define requirements and improve detection and response capabilities.
• Perform other responsibilities and special projects as assigned.

Skills

Incident response

Security operations

Threat detection

Threat intelligence

Forensics

Security automation

NIST SP 800-61

MITRE ATT&CK

Microsoft Defender

Microsoft Sentinel

Sigma

YARA

Python

PowerShell

Education

Bachelor's degree in information technology, computer science, information security, a related technical discipline, or equivalent education and relevant experience

Tools

SIEM

SOAR

Microsoft Defender

Microsoft Sentinel

Job description

Requisition Number: 34778

Company: Westinghouse Electric Co

Location:

Cranberry Township, US

Are you interested in being part of an innovative team that supports Westinghouse's mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.

About The Role

As an Information Security Analyst III you will identify, investigate, contain, and help resolve security incidents while developing and improving enterprise detection capabilities. You will translate threat intelligence, attacker tactics, techniques, and procedures into applicable monitoring, analytics, and response workflows across security platforms. The analyst serves as a senior technical resource between IT, Information Security, Legal, Data Privacy, HR, and business partners, providing clear findings, risk context, and recommendations.

You will report to the Global Incident Response Supervisor and be located at Cranberry Township, PA. Hybrid work schedule.

Key Responsibilities

• Respond to and investigate computer security incidents observing established incident response policies, plans, and procedures, including evaluation, scoping, containment, eradication, recovery, and post-incident analysis.
• Analyze problematic activity reported by security technologies and partners, including IT, HR, Legal, and Data Privacy, and maintain complete, accurate investigation case records.
• Develop, validate, implement, and maintain detection use cases, analytics, alerts, reports, and dashboards in security monitoring platforms to identify potential threats and vulnerabilities.
• Translate current threat intelligence and attacker tactics, techniques, and procedures into threat models, detection logic, investigation guidance, and response actions.
• Plan, test, tune, and refine detection content to improve accuracy, coverage, and operational value while reducing false positives and unnecessary analyst workload.
• Provide technical guidance to first responders and other security operations personnel during investigations and major incidents, including on-call support.
• Provide relevant, and audience-appropriate incident updates, investigation findings, risk assessments, metrics, and recommendations to partners and decision makers.
• Maintain the operational effectiveness and configuration of assigned security solutions, including Microsoft Defender, Microsoft Sentinel, SIEM, SOAR, forensic, and threat intelligence technologies.
• Collaborate with security operations, threat intelligence, engineering, architecture, and teams to define requirements and improve detection and response capabilities.
• Perform other responsibilities and special projects as assigned.

Qualifications

• Bachelor's degree in information technology, computer science, information security, a related technical discipline, or equivalent education and relevant experience.
• 4+ years of relevant cybersecurity experience, including substantial experience in security operations, incident response, threat detection, detection engineering, threat intelligence, forensics, security automation, or related functions.
• Experience of incident response frameworks and methodologies, including NIST SP 800-61 and MITRE ATT&CK.
• Advanced experience with SIEM and SOAR platforms, security analytics, forensics, threat intelligence, and endpoint or cloud security technologies.
• Practical expertise with Microsoft security tools and applications, including Microsoft Defender and Microsoft Sentinel.
• Create efficient, complex queries and analytics in large security data platforms and to build alerts, reports, dashboards, and automated response actions.
• Experience maturing threat detection capabilities, translating threat intelligence into applicable detection logic, and developing detections as code using formats such as Sigma or YARA.
• Proficiency with one or more high-level programming or scripting languages, such as Python or PowerShell.

We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $85,200 to $106,500 per year.

Why Westinghouse?

Benefits

Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer:

• Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
• Wellness Programs designed to support employees in maintaining their health and wellbeing including Employee Assistance Program providing support for our employees and their household members
• 401(k) with Company Match Contributions to support employees' retirement
• Paid Vacations and Company Holidays
• Opportunities for Flexible Work Arrangements to promote work-life balance
• Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
• Global Recognition and Service Programs to celebrate employee accomplishments and service
• Employee Referral Program

Westinghouse Electric Company Is The Global Nuclear Energy Industry's First Choice For Safe, Clean, And Efficient Energy Solutions. We Enable Our Delivery Of This Vision By Living Our Value System

• Safety and Quality
• Integrity and Trust
• Customer Focus and Innovation
• Speed and Passion to Win
• Teamwork and Accountability

While our Global Headquarters are located in Cranberry Township, PA, we have over 11,000 employees working at locations in 19 different countries. You can learn more by visiting http://www.westinghousenuclear.com.

Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities

Get connected with Westinghouse on social media: Twitter | Facebook | LinkedIn | YouTube

Employment opportunities may require access to information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.

Job Segment: Information Security, Computer Science, Nuclear Engineering, Environmental Engineering, Engineer, Technology, Engineering