Security Engineer I — SIEM & NERC CIP Focus

Duquesne Light Company; Pittsburgh (Allegheny County); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Duquesne Light Company in Pittsburgh is seeking an Information Security Engineer I to strengthen our cybersecurity program with a focus on NERC CIP compliance, SIEM operations, and incident response. The role protects critical infrastructure and collaborates with stakeholders to improve cyber resilience.

Candidates should have 7+ years of related experience and hands-on experience with SIEM (Splunk) and configuration monitoring.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Engineering or a related field, or equivalent professional experience, required.
• Seven (7) or more years of experience in cybersecurity engineering, security operations or compliance-focused security roles, required.
• Hands‑on experience with SIEM technologies, such as Splunk, required.
• Experience with configuration monitoring and file integrity monitoring tools, including Tripwire Enterprise or equivalent solutions, required.

Responsibilities

• Conduct risk assessments and gap analyses related to NERC CIP requirements and cybersecurity leading practices.
• Administer, monitor and optimize SIEM platforms to support threat detection, alerting, log correlation and incident investigation.
• Develop and tune SIEM use cases, correlation rules, dashboards and reporting capabilities.
• Provide technical guidance, knowledge sharing and operational support to junior security analysts and engineers.
• Collaborate with infrastructure, network, application and operations teams to improve system hardening and secure configuration practices.
• Support and maintain compliance with applicable NERC CIP standards across enterprise and operational technology environments.
• Participate in NERC CIP audits, assessments, evidence collection, remediation tracking and compliance reporting activities.
• Collaborate with internal stakeholders to implement and maintain cybersecurity controls aligned with regulatory and organizational requirements.
• Assist in the development, review and maintenance of cybersecurity policies, standards, procedures and technical documentation.
• Analyze security events and alerts to identify indicators of compromise, suspicious activity or policy violations.
• Integrate log sources from enterprise and OT systems into centralized monitoring platforms.
• Manage and support configuration monitoring and file integrity monitoring solutions.
• Develop and maintain baselines for critical cyber assets and monitor for unauthorized changes.
• Investigate configuration drift, integrity violations and security exceptions.
• Participate in cybersecurity incident response activities, including detection, triage, containment, eradication, recovery and post-incident analysis.
• Support incident investigations involving enterprise and OT/ICS environments.
• Maintain incident response documentation, playbooks and lessons-learned reports.
• Assist in coordinating tabletop exercises and cybersecurity readiness activities.
• Participate in cross-functional cybersecurity projects and strategic initiatives.
• Participate in an on-call rotation for cybersecurity incidents and operational support.

Skills

Incident response

Network security

System hardening

Vulnerability management

Access control

NIST/CIS/IEC frameworks

EDR/Threat intel

Analytical skills

Communication

Collaboration

Mentoring

Education

Bachelor's degree in Information Security

Tools

Splunk

Tripwire Enterprise

Job description

Duquesne Light Company in Pittsburgh is seeking an Information Security Engineer I to strengthen our cybersecurity program with a focus on NERC CIP compliance, SIEM operations, and incident response. The role protects critical infrastructure and collaborates with stakeholders to improve cyber resilience.

Candidates should have 7+ years of related experience and hands-on experience with SIEM (Splunk) and configuration monitoring.