Cybersecurity Specialist

Coast Electric is seeking a highly motivated Cybersecurity Specialist to join our Information Technology team. This position plays a critical role in protecting the organization’s information systems by identifying, analyzing, and mitigating cybersecurity risks while supporting the confidentiality, integrity, and availability of company data and technology resources., * Monitor, detect, investigate, and respond to cybersecurity threats, vulnerabilities, and security incidents to protect organizational systems, networks, and data.

• Design, implement, maintain, and continuously improve cybersecurity technologies, security controls, and monitoring tools to safeguard Coast Electric and CoastConnect infrastructure.
• Conduct risk assessments, vulnerability assessments, security audits, penetration testing, and compliance reviews to identify and mitigate security risks.
• Manage identity and access controls, data protection strategies, and third-party security evaluations to ensure adherence to security standards and best practices.
• Develop, maintain, and test cybersecurity policies, procedures, incident response plans, disaster recovery plans, and other security governance initiatives.
• Provide security guidance and recommendations for new systems, applications, and technology projects to ensure secure design and implementation.
• Promote a culture of cybersecurity awareness through employee training, phishing simulations, security communications, and ongoing education programs.

• Associate degree in Computer Science, Cybersecurity, Information Technology, or related field required; bachelor’s degree preferred.
• Five (5) years of cybersecurity, network security, or information technology.
• Strong understanding of cybersecurity principles, threat detection, incident response, and vulnerability management.
• Experience with SIEM, EDR/XDR, IDS/IPS, firewalls, and other enterprise security technologies.
• Ability to analyze complex problems, identify risks, and implement effective solutions.
• Cybersecurity certification preferred or ability to obtain certification.
• Knowledge of critical infrastructure security and NERC CIP standards is a plus.