Lead Cyber Detect & Response Specialist

Iberdrola; City of Rochester (NY); On-site; USD 117,000 - 146,000; Full time

Benefits offered by this job

Competitive benefits

Performance-based bonuses

12% 401(k) match

Health, dental, and vision insurance

Tuition reimbursement

Professional development

Job summary

Avangrid is seeking a Lead Cyber Detect & Response Specialist to lead incident detection and response across OSG and other business units. You will oversee security operations, coordinate with IT and OT teams, and mentor junior staff while advancing a zero-trust security framework.

The role requires a Master’s or equivalent with 6+ years in cybersecurity and strong experience in incident response, threat hunting, and security operations.

Qualifications

• Requires 3+ years information security experience.
• Master’s/Bachelor’s/Associate degree in engineering or technical field with cybersecurity focus.
• Experience with incident detection, incident response, and security monitoring is essential.

Responsibilities

• Lead development and deployment of security services for zero-trust architecture.
• Establish a defined, highly available incident detection and response program for OSG.
• Identify, respond, and mitigate threats to Avangrid and affiliates.
• Conduct incident response activities including advanced investigations and remediation guidance.
• Coordinate cross-unit response efforts during incidents and post-mortems.
• Mentor staff on incident response, analysis, and tools.
• Develop and update incident response playbooks and testing procedures.

Skills

Team collaboration

Proactive mindset

Decision making under pressure

Oral and written communication

Incident response experience

Troubleshooting

Education

Master’s Degree in Engineering, Computer Science, or technical related degree

Bachelor’s Degree in Engineering, Computer Science, or technical related degree

Associate Degree in Engineering, Computer Science, or technical related degree

Tools

Host-based antivirus

IDS/IPS

Firewall & hardening

Vulnerability management

Forensics software

Data Loss Prevention (DLP)

Job description

Lead Cyber Detect & Response Specialist# Grupo Iberdrola I Canal de Empleo## Lead Cyber Detect & Response SpecialistSolicitar: Estados Unidos, Nueva York, Rochester: NY - Vestal - Binghamton ECC: Publicado hoy: Fecha final: 26 de noviembre de 2026 (Quedan 30 días para realizar la solicitud): R-34599Position InformationJob Title: Lead Cyber Detect & Response SpecialistLocations: Rochester, NY or Binghamton, NYSalary Range: $116,640 - $145,800Schedule: On Site, 5 days ## **Description** The Lead Cybersecurity Specialist, Cyber Detection & Response is responsible for the detection and response to security incidents and threats within Avangrid’s Operation Smart Grid (OSG) and other Business Units including Control Systems and Automation, OSG Telecommunications, OSG Infrastructure, OSG AMI, Distributed Automation, Process & Technology, Innovation, Corporate Security, Corporate Risk, Legal, Insurance, Audit, Investment Planning, and Regulatory. This role requires the ability to fully engage in all phases of the incident lifecycle, provide leadership and mentorship of indirect reports, understanding threats and providing oversight mitigations. ## ***Responsibilities*** Lead the development and deployment of security services and solutions in support of Avangrid’s evolution towards a zero-trust security framework.Assist in establishing a security incident detection and response program for OSG that is well defined, highly available, repeatable, and is constantly measured for Key performance, Key risk, and Key operational level metrics.Identify, respond, and mitigate threats to Avangrid and its affiliated entities.Conduct incident response activities, including advanced investigation (forensic, malware analyses, root cause analysis etc.) to investigate potential intrusions and develop remediation guidance.Perform the activities necessary for the immediate, short-term rapid resolution of incidents to minimize risk exposure and production down-time.Maintain a professional communicative relationship with clients and management to provide information throughout the incident, problem, and change management cycles.Coordinate and drive efforts among multiple IT and OT business units during response activities and post-mortem.Proactive monitoring of internal and external-facing environment using specialized security applications.Provide timely, comprehensive, and accurate information to OSG leadership in both written and verbal communication.Proactively research and monitor security-related information sources to aid in the identification of threats to Avangrid networks, systems and Avangrid control systems.Mentor and develop other staff members on incident response, analysis, and tools.Routinely develop and update incident response playbooks to ensure response activities align with best practices, minimize gaps in response and provide comprehensive mitigation of threats.Participate and develop security incident and penetration testing procedures including penetration testing criteria, performance of testing, and implementation of lessons learned.## ## ***Skills and Requirements*** Education & Experience Required Master’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 6+ years’ experience in Cybersecurity.Bachelor’s Degree in Engineering, Computer Science, or technical related degree with a minimum of 8+ years’ experience in Cybersecurity.Associate Degree in Engineering, Computer Science, or technical related degree with a minimum of 10+ years’ experience in Cybersecurity. 3+ years of Information Security experience. Hands-on troubleshooting, analysis, and technical expertise to resolve incidents and service requests; previous experience in troubleshooting day-to-day operational processes such as security monitoring, data correlation, security operations, etc.Proven experience performing analysis of security events and incidents, to determine root cause and provide resolution.Strong working knowledge of at least three of the following security tools: host-based antivirus, anti-spam gateway solutions, firewalls, IDS/IPS, server and network device hardening, data loss prevention, forensics software, vulnerability management, website security.Competence in using both internal and external ticketing systems for incident, problem & change management.Excellent oral and written communication skill.Experience working with Cyber Threat Intelligence, Threat Defense and Hunting teams.Customer oriented leader capable of communicating to technical and business unit stakeholders.Experience with Access Controls systems and solutions (SSO, AD, TACACS, MFA, cloud based).Experience with a variety of information and network security infrastructure and tools (SIEM, IDS/IPS, firewall, WAF, configuration management).Experience with key security process and procedures (system hardening, patch management, vulnerability management, log management, access controls, supplier management, information classification/handling). Experience with common security operations services (access management, electronic perimeter management, baseline management, vulnerability assessments).Skills/Abilities: A team-focused mentality with the proven ability to work effectively with diverse stakeholders.Proactive attitude, seeking for improvement opportunities which can positively impact the security posture and the business.An ability to work extremely well under pressure while maintaining a professional image and approach.Decision-making capabilities, with an ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one. Desired Skills/ Abilities: Relevant technical security certifications (CISM, CEH, Security+, CISSP, GSOC etc.)Security architecture/management certifications (ISO27000, ISACA, etc.).Knowledge of Federal Government cybersecurity activities and practices.Experience in Federal or State regulatory environments.Experience in Federal cybersecurity agencies and environments.Experience in a utility environment.Experience working with international teams.Security clearance.Threat Intelligence or Forensic background is a plus.## ***Competencies***· Be a role model· Be agile· Collaborate and Share· Develop Self & Others· Empower to grow· Focus to achieve results· Technical Skills **What We Offer:*** **Competitive benefits and growth opportunities*** **Generous performance‐based bonuses*** **12% 401(k) match*** **Comprehensive health, dental, and vision insurance*** **Tuition reimbursement*** **Professional development and clear career‐advancement pathways****For more information, please visit:** **Benefits - Avangrid**#LI-Onsite; #LI-CH1**Company:**ROCHESTER GAS & ELEC CORP**Información Movilidad** Tenga en cuenta que cualquier solicitante que no sea ciudadano del país de la vacante estará sujeto al cumplimiento de los requisitos de inmigración aplicables para trabajar legalmente en ese país. Las prácticas y políticas de empleo de AVANGRID están orientadas a la contratación de una plantilla diversa y al mantenimiento de una cultura inclusiva. En AVANGRID ofrecemos oportunidades de empleo y promoción justas y equitativas a todos los empleados y candidatos independientemente de su raza, color, religión, nacionalidad, sexo, orientación sexual, edad, estado civil, discapacidad, condición de veterano protegido o cualquier otra condición protegida por la legislación federal, estatal o local. Obtenga más información sobre igualdad en el empleo en este enlace Si usted es una persona con una discapacidad o un veterano discapacitado que no puede utilizar nuestra herramienta en línea para buscar o aplicar a un empleo, puede solicitar una adaptación razonable poniéndose en contacto con nuestro departamento de Recursos Humanos en el 203-499-2777 o en [e-mail]-26-2026**About Avangrid:** Avangrid, Inc. is a leading energy company in the United States working to meet the growing demand for energy for homes and businesses across the nation through service, innovation, and continued investments by expanding grid infrastructure and energy generation projects. Avangrid has offices in Connecticut, New York, Massachusetts, Maine and Oregon, including operations in 23 states with approximately $47 billion in assets, and has two primary lines of business: networks and power. Through its networks business, Avangrid owns and operates eight electric and natural gas utilities, serving more than 3.3 million customers in New York and New England. Through its power generation business, Avangrid owns and operates more than 75 energy generation facilities across the United States producing 10.5 GW of power for over 3.1 million customers. Avangrid employs approximately 8,000 people and has been recognized by JUST Capital as one of the JUST 100 companies – a ranking of America’s best corporate citizens – in 2025 for the fifth consecutive year. The company was named among the World’s Most Ethical Companies in 2025 for the seventh consecutive year by the Ethisphere Institute. Avangrid is a member of the group of companies controlled by Iberdrola, S.A. For more information, visit www.avangrid.com.