Cyber Security Analyst

Weber Basin Water
Layton, UT, United States
2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Compensation
$68,432.0 - $76,960.0
Working hours
Shift work
Job source

Tech stack

Microsoft Windows Communications Protocols Cyber Security Information Systems Computer Networks Multi-Factor Authentication Firmware Health Information Management Supervisory Control and Data Acquisition (SCADA) Identity and Access Management Intrusion Detection Systems Network Packet
+10 more
OSI Models Network Architecture Role-Based Access Control Security Software Security Information and Event Management Traffic Analysis Computer Networking Systems Firewalls (Computer Science) Storage Technologies Information Technology

Job description

Under the general guidance and direction of the Information Services Department Manager and Assistant General Manager, conducts assessments with tools and software to identify and remediate any cybersecurity vulnerabilities within the District’s IT and OT networks. The duties are of a wide range - from fairly routine to highly technical., * Apply operating system and 3rd party software patching and updates.

  • Update firmware and patching on IT and OT network infrastructure.
  • Review configuration of network infrastructure
  • Use of software and network tools for vulnerability identification and assessments.
  • Utilize and configure endpoint management and log collection and storage software solutions to secure devices and infrastructure.
  • Implement the NIST cybersecurity framework.
  • Identify unwanted or unknown network traffic via available tools.
  • Create monthly reports for review of current vulnerabilities and mitigation efforts.
  • Monitor and respond to security alerts from SIEM, IDS/IPS, and other detection platforms; investigate incidents and document findings and remediation steps.
  • Administer and maintain identity and access management (IAM) controls, including role-based access, multi-factor authentication (MFA), and privileged account management.
  • Evaluate, implement, and manage security for OT/ICS environments, including SCADA systems, PLCs, HMIs, and industrial communication protocols.
  • Develop, test, and maintain an incident response plan; participate in tabletop exercises and post-incident reviews to continuously improve response procedures.
  • Conduct security awareness training for District staff; promote a culture of cybersecurity best practices across IT and OT teams.
  • Assist in maintaining compliance with applicable regulatory requirements and standards.

Requirements

Do you have experience in Network infrastructure management?, Do you have a Bachelor’s degree?, MINIMUM QUALIFICATIONS (The education and experience requirements for this job may be satisfied by any acceptable equivalent combination of education and experience.)

Education: Bachelor’s or master’s degree (preferred) from accredited college or university in Information Technology/Systems, Computer Science, or Cyber Security.

Experience: Minimum of 2 years of experience in Information Systems, Computer Science or related field. Advanced degrees and certifications may be substituted for experience.

Knowledge: Knowledge of computer network systems and hardware. Knowledge of the NIST Cybersecurity framework is preferred but not required. An understanding of OT (Operational Technology) networks is required. Knowledge of network packet traffic analysis. Knowledge of various cybersecurity tools and software is preferred. Knowledge of network firewall and switch management and configuration is required. Knowledge of the Microsoft Windows operating system is required. Familiarity with the OSI model and an understanding of TCP/UDP protocols is necessary. Knowledge of SIEM platforms, IDS/IPS systems, and log aggregation tools is preferred. Familiarity with identity and access management (IAM) concepts including MFA, role-based access control, and privileged access management is preferred. Familiarity with CISA cybersecurity guidance for water systems is a plus. Understanding of backup, recovery, and business continuity principles as they relate to cybersecurity is desired.

Benefits & conditions

Pulled from the full job description

  • Referral program
  • Professional development assistance
  • Tuition reimbursement
  • 401(k)
  • Health insurance
  • Retirement plan
  • 401(k) matching, We are looking to fill a Cyber Security Analyst position. The schedule for this position is Monday-Friday from 8:00 a.m. - 4:30 p.m. with an option to work a 5/4/9 schedule that includes 9 hour days with every other Friday off. Remote work may be available after training period.

We offer excellent benefits including a wellness program, pension, 401(k) plan, paid vacation and sick leave, health, dental, vision, HRA, life, LTD insurance, and tuition reimbursement.

Every employee at Weber Basin is responsible for fostering an organizational culture that is based on the District’s core values of Collaboration, Ownership, Mutual Respect, Professionalism, Appreciation, Safety, and Sustainability., * 401(k)

  • 401(k) matching
  • Dental insurance
  • Employee assistance program
  • Flexible spending account
  • Health insurance
  • Life insurance
  • Paid time off
  • Professional development assistance
  • Referral program
  • Relocation assistance
  • Retirement plan
  • Tuition reimbursement
  • Vision insurance

About the company

Weber Basin Water Conservancy District is Northern Utah’s Regional Water Supplier for: treated municipal water, wholesale irrigation water, retail secondary irrigation water, untreated industrial water and groundwater replacement water. We proudly serve the water needs in Davis, Weber, Summit, Morgan and Box Elder counties.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

3:17 min

Applying authorization at the network versus application layers

Alex Olivier Alex Olivier · LIVE

2:19 min

Orchestrating over-the-air firmware updates for vehicle modules

Denis Grahovac · WWC 2021

2:47 min

Exploring career opportunities and recruitment open positions

Kurt Eder · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all