Senior Cyber Incident Responder

Job Responsibilities

• Maintain knowledge of adversary activities, including intrusion tactics, attack techniques and operational procedures.
• Investigate and respond to potential cybersecurity incidents.
• Analysis of security event logs from a variety of sources.
• Forensic analysis of potential evidence, static and dynamic malware analysis, Network packet capture analysis.
• Lead incident response efforts, coordinating resources as needed.
• Documentation of analysis, including summarization for executive review.
• Perform proactive threat hunting.
• Work cross-functionally to recommend, facilitate, and test security control improvements.
• Create and refine security operations workflows for new and existing tools.
• Provide guidance to junior analysts.
• Share on-call responsibility outside of business hours, onsite and remote.

Qualifications

• Minimum: High School or GED-Diploma, 4 years’ experience in IT-security, including working in Security Operations Centers.
• Desired: Bachelor’s Degree in Computer Science or job-related discipline or equivalent experience.
• Previous experience supporting cyber defense analysis of Operational Technology (OT) Networks, including Integrated Controls Systems (ICS), SCADA, and Process Control Networks (PCN).
• Formal IT Security/Network Certification, such as WCNA, CompTIA Security +, Cisco CCNA, GIAC GCIH, GMON, GCFA, GCFE, GREM, GICSP, GRID, or other relevant certifications.
• Utility Industry experience.
• Previous experience working with various SIEM, EDR, and digital forensic technologies.
• Experience with scripting in Python, PowerShell.
• Malware reverse engineering skills.

Pay

PG&E is providing the full salary/pay range for this position. The actual amount paid to an individual will be based on multiple factors, including, but not limited to, internal equity, specific skills, education, licenses or certifications, experience, market value, and geographic location. The range to reasonably expect will be between the minimum and midpoint listed below. The final decision will be made on a case-by-case basis related to the factors above. This job is also eligible to participate in PG&E’s discretionary incentive compensation programs.

Schedule

The position is hybrid, working from your remote office and Concord, CA 3 days per week, or more, based on business needs or company requirements.