Cybersecurity Analyst II

About the role

Electric Power Engineers (EPE) is seeking a bilingual Cybersecurity Analyst to be based in our Panama City office. This role serves as the primary cybersecurity resource for the integration and ongoing security operations of Estudios Electricos (EE) into the EPE network. The analyst will function as the boots-on-the-ground security presence for the EE environment, owning all aspects of cyber risk monitoring, threat analysis, incident response coordination, and security policy for that entity. This position reports directly to the EPE Security Manager and is a critical link in EPE's broader enterprise security posture.

Responsibilities

• Estudios Electricos Integration & Security Ownership
  • Lead the cybersecurity workstream for the integration of Estudios Electricos into the EPE network, including asset discovery, risk assessment, and network segmentation planning.
  • Serve as the dedicated security point of contact for all EE systems, users, and environments.
  • Develop and maintain a comprehensive security baseline for EE aligned with EPE enterprise standards.
• Threat Monitoring & Alert Management
  • Monitor security information and event management (SIEM) platforms, endpoint detection tools, and network traffic for anomalous activity across the EE environment.
  • Triage, investigate, and disposition all security alerts originating from EE systems.
  • Escalate confirmed or suspected incidents to the EPE Security Manager with timely, accurate situational reporting.
• Risk Analysis & Reporting
  • Conduct ongoing cyber risk assessments of the EE environment, identifying vulnerabilities, threat vectors, and control gaps.
  • Deliver regular threat intelligence briefings and risk status reports to the Security Manager, including critical findings, trending threats, and recommended mitigations.
  • Maintain a risk register for the EE environment and track remediation progress.
• Incident Response
  • Serve as the on-site lead for EE incident response activities, coordinating the EE incident response team through detection, containment, eradication, and recovery phases.
  • Develop, maintain, and exercise EE-specific incident response plans and playbooks.
  • Document all incidents thoroughly and produce post-incident reports with root cause analysis and lessons learned.
• Policy Development & Compliance
  • Draft, implement, and enforce cybersecurity policies, standards, and procedures applicable to the EE environment.
  • Ensure EE operations align with EPE enterprise security policies and applicable regulatory requirements.
  • Conduct periodic security awareness training for EE staff.
• Vulnerability Management
  • Perform and coordinate regular vulnerability scans and penetration testing activities for EE systems.
  • Prioritize and track remediation of identified vulnerabilities in coordination with EE IT staff and EPE engineering teams.

Requirements

Required

• Fluency in Spanish and English (written and verbal) — bilingual communication is essential for this role given the Panama City operating environment and coordination with EPE leadership.
• Minimum 3 years of experience in a cybersecurity analyst, information security, or related role.
• Active certification in one or more of the following (or equivalent):
  • CompTIA Security+
  • CompTIA CySA+
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Systems Security Certified Practitioner (SSCP)
  • GIAC Security Essentials (GSEC)
• Demonstrated experience in cyber risk analysis and threat assessment.
• Hands-on experience with SIEM platforms, endpoint detection and response (EDR) tools, and network monitoring solutions.
• Working knowledge of incident response methodologies and the ability to lead a response team through the full IR lifecycle.
• Familiarity with security policy development and implementation.
• Strong written and verbal communication skills, including the ability to translate technical findings into executive-level reporting.
• Experience leveraging AI and automation tools responsibly to improve quality, productivity, and innovation.

Preferred

• Familiarity with NIST Cybersecurity Framework (CSF), ISO/IEC 27001, or similar frameworks.
• Experience with network integration projects, including security architecture review and segmentation design.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.

Reporting & Communication

• This position reports directly to the EPE Security Manager.
• Maintain a regular cadence of reporting, including:
  • Daily: Alert and incident status updates as warranted.
  • Weekly: Threat landscape summary and operational status of the EE environment.
  • Monthly: Formal risk posture report covering vulnerabilities, incidents, policy compliance, and integration milestones.
  • Ad hoc: Immediate escalation of critical threats, active incidents, or significant changes in the EE threat environment.

Benefits

• Comprehensive Health & Life Insurance: 100% premium coverage for employees, with partial coverage available for eligible dependents.
• Opportunity to work on cutting-edge automation solutions for the power industry.
• Collaborate with a team of experts in software engineering, renewable energy, and grid technologies.
• Flexible hybrid work environment with opportunities for professional growth and innovation.

Location

This position will be located in Panama City, Panama.

Travel

Occasional travel may be needed (10% or less).