IT Cybersecurity Analyst - Vulnerability Management Cyber Security Engineer

About Us

WEC Energy Group is one of the nation's largest electric generation and distribution and natural gas delivery holding companies serving 4.7 million customers across the Midwest. We are committed to providing clean, reliable, and affordable energy in an environmentally sustainable manner. Customers are the heart of our business, and we work every day to help grow and support communities where we provide vital energy services. As a Fortune 500 company, we value and develop our employees who are making a difference in a mission that matters. We don't just offer a job; we provide fulfilling careers where safety and well-being are paramount. Join our team and experience first-hand our commitment to your success. We are powered by a diverse and inclusive workforce fueled by the pride in what we do.

Job Summary

The IT Cybersecurity Analyst is an intermediate level position with the purpose of transacting technical cybersecurity business given a competent knowledge of the work. Works on systems, deliverables and issues that are complex and applies industry best practices, as well as company policies and practices to develop solutions. Is required to effectively support the assessment of threat environment and receives general instructions on routine work and more detailed instructions on new work.

Responsibilities

• Stay current with emerging threats, vulnerabilities, and mitigation techniques to continuously improve security posture
• Collaborate with internal teams including infrastructure, applications, security operations center, cyber threat intelligence, and offensive security to validate vulnerabilities, assess risk, prioritize and recommend mitigation strategies
• Identify, review and analyze vulnerability data to detect trends and patterns
• Install, integrate, configure, and deploy vulnerability scanning solutions
• Confirm and refine asset scope for scan activities
• Analyze scan results, track and coordinate with system owners to ensure timely remediation
• Maintain a vulnerability dashboard and provide executive-level reporting
• Influence the development of vulnerability management standards and security policies
• Executing vulnerability management processes, suggesting applicable change controls, and security exceptions
• Maintaining and updating process guides and assisting with reporting to leadership and service stakeholders
• Assisting and supporting incident handling/response investigations

Qualifications

• Bachelor's degree in computer science, computer engineering, software engineering, information technology, computer information systems, MIS, or engineering is preferred. A combination of an associate degree, military or professional cybersecurity experience and cybersecurity certification (CISSP, GAIC, MCSE, CEH, GICSP, CSSA, CISM) will be considered
• 2+ years in cybersecurity required with a strong proficiency in Vulnerability Management preferred
• Excellent communication and interpersonal skills
• Strong knowledge with SIEM platforms and threat intelligence tools

Preferred Qualifications

• Minimum of 2 years of experience with Vulnerability Management along with strong knowledge of CVSS scoring, patch management and secure configuration practices preferred
• 5+ years in cyber security and a strong proficiency in Vulnerability Management
• Cybersecurity certification (CISSP, CISM, OSCP, CCSP, CCNA, GAIC, MCSE, GICSP, CSSA)
• Desirable skills include any of the following:
  • In-Depth Knowledge of Operating Systems (Windows, Unix/Linux, MacOS)
  • Programming and Scripting Experience (Python, PowerShell, Perl, Java, .NET (VB, C#), etc.)
  • Network, Identity, and Authentication Management (TCP/IP, Switch/Route, DNS, DHCP, Kerberos, PKI, RADIUS, etc.)
  • Cloud Platforms (Azure, AWS, GCP)

Pay

Pay Range Minimum: $78,702.26 Pay Range Maximum: $156,125.32

Schedule

This position offers flexibility for a hybrid work arrangement (remote/on-site) with time spent in the office in Milwaukee, WI.