CYBER SECURITY ANALYST II/III

Position Summary

Under direct supervision, monitor Seminole’s networks and cyber assets for potential security incidents and data breaches. This includes monitoring of the network infrastructure (firewall, switches, etc.), the SIEM systems for cybersecurity threats, and assisting with threat mitigation and incident response. Additional responsibilities include administrating the cybersecurity awareness program and participating in the security training. Lastly, support the NERC CIP regulatory standards on applicable systems and during audits.

Qualifications and Education Requirements

• A bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related field is required.
• A minimum of three (3) years of experience as a Cybersecurity Analyst or similar role, with at least two years as a Firewall Administrator, Network Security Analyst, or Security Engineer, is required.
• Three (3) years of relevant experience can substitute for each year of education.
• A master’s degree can substitute for one year of experience.
• Candidates may be considered for the job level of Cyber Analyst III with additional years of experience.

Core Competencies

• Adaptable
• Collaborative
• Conscientious
• Critical-Thinking
• Outcome-Driven
• Professional

Technical Competencies/Skills

• Basic cybersecurity knowledge
• General administration for MS Windows systems
• Fundamental of firewalls, switches, and routers
• Knowledge of Security Information Event Management (SIEM) systems
• Proficiency with Microsoft Office Applications

Soft Competencies/Skills

• Effective verbal/nonverbal, listening, and written communications
• Analytical Problem Solving
• Works Independently
• Organization

Essential Functions

• Maintains critical cyber equipment in a real-time environment that requires 24/7 on-call support and is subject to call out at any time which may include extended periods during inclement weather or other emergency conditions.
• Makes recommendations for changes to improve service and/or contain costs.
• Supports the cybersecurity training/education programs encompassing the enterprise.
• Supports cyber security related projects, as necessary.
• Supports Seminole’s cybersecurity training/education programs administered corporate wide.
• Assists with incident response, recovery, and containment activities in support of the NERC Reliability Standards (CIP-003, 008 and 009).
• Remains current on cybersecurity threats, technological advancements and industry trends.
• Produces cybersecurity related data, alerts and reports as requested.
• Provides weekly progress reports on all assigned tasks and activities.

Physical Requirements

• Must be able to follow established protective measures including wearing required personal protective equipment (PPE).
• Must possess a valid driver’s license and acceptable Motor Vehicle Report.
• Some travel and work outside of normal business hours.
• While working in certain areas of the plant or substation there is the potential for exposure to hazards typical of an industrial working environment.

NERC Compliance

• Performs NERC Compliance Program roles if/as designated in Seminole's Standard Ownership Matrix (SOM) including ongoing evidence retention in "audit-ready" form.
• You should also be familiar with Seminole's Enterprise Internal Compliance Program (ENT-GCD-RGC-EP-054) to further your understanding of Seminole's compliance program and your duties and responsibilities in the SOM.