Cyber Security Analyst II

Support the our client’s Cyber Security Program by monitoring CIP-007 R2 patch management processes and tools. Contribute to maintaining compliance with NERC CIP standards, developing security baselines, and supporting vulnerability assessments to protect cyber assets and ensure system reliability., * Maintain and support the Cyber Security Program, protecting all corporate cyber assets.

• Infrequent overnight business travel to locations throughout the our client’s service territory (OH, PA, NJ, MD, WV) will be required of this position.
• Travel around Akron area as needed
• Support compliance with NERC CIP, protecting the Bulk Electric System.
• In conjunction with the team and other stakeholders, develop and maintain security baselines, procedures, and other strategies that effectively protect cyber assets while ensuring reliable and consistent system operations.
• Consult with Business Units and IT on security and protection measures of systems and information during the design and implementation of an on-premise and cloud/SaaS solutions.
• Participate in the Cyber Incident Response process.
• Aid in the development and maintenance of the Security Awareness Training program.
• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services.
• Support the implementation of Corporate Cyber Security capital projects by assisting with the implementation of devices; evaluating vendor solutions; assisting with coordination of vulnerability assessment activities; assisting with review of programs, policies, procedures and standards in relation to cyber security best practices.

• Bachelor’s Degree in Computer Science, Information Security, or similar discipline is preferred. A bachelor’s degree in another field with relevant industry experience in cyber/information security will be considered.
• 4+ years of professional work experience in cyber or information security, or in another IT discipline where cyber or information security was a significant portion of the position’s responsibility.
• Effective communication skills which includes creating and delivering presentations, briefs, and training sessions.
• Must compose well-written, professional documents and reports with minimal editorial and proofing support.
• Translate technical output from systems and assessment tools into understandable reports and action plans.
• Work effectively with people at varying levels within an organizational hierarchy to accomplish tasks and goals.
• Work independently within a set of objectives, procedures, and parameters to accomplish project tasking.
• Able to lead ad-hoc project task teams and other workgroups to accomplish project tasks, resolve issues, and lead/communicate important changes.
• Able to participate in an on-call rotation (cycling weekly) responding to out-of-hours calls and alerts in support of security response, including infrequent on-site response out-of-hours.
• Experience in hands-on operation and administration of one or more standard IT discipline areas (Windows, Linux/Unix, Networking, etc.) in a professional setting is preferred.
• Holding a security-related certification such as a CISSP, GIAC GSEC, etc., is preferred.

Education

• Bachelor’s degree preferred

Preferred Skills

• Security-related certifications such as CISSP, GIAC GSEC, etc.

This role offers the opportunity to work on critical cyber security initiatives within a leading energy provider, supporting vital infrastructure and compliance standards. Join a team dedicated to safeguarding cyber assets and advancing your professional expertise.

About CEI: As a trusted technology partner, CEI delivers solutions that help our customers transform their business and achieve meaningful results. From strategy and custom application development through application management - our technology and digital experience services are tailored to meet each unique need of our customers. Our staffing solutions bring specialized skills to complement our customers’ workforce and project requirements.