Senior Cybersecurity Systems Engineering Analyst

Build an exciting, rewarding career with us - help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

We are one of the largest electric power holding companies in the United States, providing electricity to 7.7 million retail customers in six states. We have approximately 51,000 megawatts of electric generating capacity in the Carolinas, the Midwest and Florida - and natural gas distribution services serving more than 1.6 million customers in Ohio, Kentucky, Tennessee and the Carolinas.

We are transforming our customers' experience, modernizing our energy grid, generating cleaner energy and expanding our natural gas infrastructure to create a smarter energy future for our customers.

Security is critical to our company's success. As part of our team, you will partner with project managers and technical engineering teams to direct a broad range of corporate security initiatives, while participating in the planning, analyzing and implementation of solutions in support of Duke Energy's business objectives. Our security team works around the clock to provide a comprehensive enterprise-wide security program, using state-of-the-art technologies to defend against breaches and keep our networks reliable and secure.

The Cybersecurity Systems Engineering Analyst will focus on improvingcybersecurity posture of the enterprise through participation in variouscybersecurity projects and initiatives as well as cybersecurity aspects of business and IT projects. The position will interface with cross-functional teams from Cybersecurity, IT, and critical business operations to ensure the confidentially, integrity, availability, and regulatory compliance of Duke Energy's computing environments. The Analyst will work closely with peers, other internal/external teams, and management to support the Cybersecurity Operations Center (CSOC) environment. The Cybersecurity Systems Engineering Analyst is expected to build positive and collaborative relationships with stakeholders across the company, identify ways to improve working relationships across organizational boundaries through collaborative planning and communicates clearly, candidly, and openly. The Analyst is also responsible for following processes and procedures as defined by Cybersecurity leadership and the Cyber Incident Response Team (CIRT).

Responsibilities:

• Implementation, support, and maintenance of Inspection Zone systems in a large enterprise environment - products such as F5 BIG-IP, Proxy SWG, Palo Alto NGFW, FireEye EX/NX, Cofense, etc.

• Support Inspection Zone Security monitoring and deployment

• Provide high level of support to Security Operations and Support teams for all products that make up the Inspection Zone security tool set

• Administration, operation, and maintenance of threat environment / protections, including installation, configuration, tuning, and maintenance of threat components

• Perform supporting tasks such as system hardening, high availability configurations, and developing backup strategies

• Assist with the creation of detailed deployment plans, architectural drawings, and operation manuals.

• Responsible for understanding the global threat landscape and general security best practices

• Drive continuous improvement of processes and procedures to improve analysis, detection, and mitigation of incidents in support of the overall Cyber Defense mission

• Create and drive action plans to address recurring or ongoing information security incidents

• Develop and maintain reporting metrics used to measure team performance, ensure analyst adherence to processes/procedures for operational consistency, identify process improvements, coaching, training and professional development of the staff

• Collaboration as appropriate with leadership and other key stakeholders

Basic/Required Qualifications:

• High School/GED

• Minimum 9 years related work experience

• Advanced TCP/IP knowledge

• Understanding of security principles

• Experience analyzing and troubleshooting network traffic

• Experience providing end to end network design or support

• Experience assisting other teams with the analysis of application problems

• Current Cisco CCNP - credentials will be verified

• Current Cisco CCDA - credentials will be verified

• Cisco CCDP - does not have to be current

• Additional relevant industry certifications

• Cyber security project experience

• Ability to work in high pressure situations and within a team environment

• Experience with writing and editing technical documentation and operational procedures

• Demonstrated effective problem solving & analytical skills

• Knowledge of network monitoring, analysis, troubleshooting, and configuration control technologies

• Familiarity or experience with the Cyber Kill Chain methodology

• Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain

• Possession of multiple industry standard certifications such as SANS GIAC/GCIA/GCIH/GCFA, CISSP, CISA, CISM, etc. or other network / system security certifications

• Innovative - ability to recognize and seek improvement and efficiency opportunities

• Strong understanding of perimeter security controls including SSL/TLS decryption, certificate management, F5 Big-IP SSLO. Ability to analyze Splunk and Palo Alto logs, collect and analyze packet captures to quickly troubleshoot and diagnose network connectivity issues at the perimeter.

• Hybrid Mobility Classification - Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable daily commute to a Duke Energy facility.

• Office Environment

• HS/GED: 9 yrs work experience {Required}

• Associates: 7 yrs work experience {preferred}

• Bachelors: 5 yrs work experience {preferred}

#LI-ZM1

#LI-Hybrid

Travel Requirements

Posting Expiration Date

All job postings expire at 12:01 AM on the posting expiration date.

Privacy

Do Not Sell My Personal Information (CA)

Terms of Use

Accessibility