Cyber Security Analyst / Sr Cyber Security Analyst (CSOC)

Job Summary

Dominion Energy’s Cyber Security Group is seeking a dynamic, detailed oriented Cyber Security Analyst toperform security event and incident investigations within our CSOC operations. Ability to work with endpoint security, SIEM, IDS, networkprotocol analyzer, open-source Intelligence, and incident response platforms. Related SIEM experience is a must. Perform continuous networkmonitoring and response in a complex and massive environment.

Located in historical and scenic downtown Richmond, Virginia, the selected candidate will serve as a CyberSecurity Analyst in a Cyber Security environment. There is one position available and it will be filled at the levelcommensurate with the successful candidate's knowledge, skills, and abilities. This position will support anexisting and mature environment and use cases. Under general supervision, works from specifications to developor modify moderately complex use cases and notable.

Duties include but not limited to:

• A proven track record in working with common security tools.
• Perform security event and incident investigations.
• Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, andincident response platforms.
• Perform continuous network monitoring and response.
• Experience working with commercial SIEM products including reporting, rule creation and modification, falsepositive tuning, and integration of threat feeds.
• Ability to read and understand packet captures.

One position is available which will be filled at the level commensurate with the successful candidate’s education, experience, knowledge, skills, and abilities.

Required Knowledge, Skills, Abilities & Experience

Cyber Security Analyst
Must possess 3-5 years of work experience in cyber security or a cyber risk related role demonstrating a intermediate understanding regarding the identification, gathering and analysis of information, threats, etc. to investigate andmitigate security risks or related IT networking experience (firewalls, CISCO, etc.). CSOC related SIEM experience is required. (Note: A Master's degree willcount as one year of experience. A partial year of six months or more will be rounded up to one year).

Senior Cyber Security Analyst
Must possess 5 years of work experience in cyber security or a cyber risk related role demonstrating a basicunderstanding regarding the identification, gathering and analysis of information, threats, etc. to investigate andmitigate security risks or related IT networking experience (firewalls, CISCO, etc.). CSOC related SIEM experience is required. (Note: A Master's degree willcount as one year of experience. A partial year of six months or more will be rounded up to one year).

Specific knowledge, skills, abilities and experience

• Demonstrates an understanding of cyber security and or data system protection principles and practices.
• An understanding of industrial cyber security standards and risk are desired. Demonstrated good organization and
  planning skills.
• Demonstrates a questioning attitude, with basic analytical and investigative skills.
• Demonstrates verbal and written communication skills, with the ability to interact effectively with others.
• A willingness to learn new skills and methodologies, conduct research, and learn to maintain hardware, software and network firewalls
  and encryption.
• Ability to work cooperatively in a teamed environment.
• Highly motivated, with the ability to work effectively under basic supervision in a fast-paced environment.
• Previous work experience or exposure to the security aspects governing software, communications, and network protocols is a plus.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education: Bachelor

Preferred Discipline(s): Computer Science; Engineering; Information Systems; Information Systems Security

Other disciplines may be substituted for the preferred discipline(s) listed above

Licenses, Certifications, or Quals Description

Preferred: Certified IS Security Professional-CISSP; SANS related: GSEC, GCED, GCIH, GICSP, GCFE, GCFA

Working Conditions

Other Working Conditions

Test Description

No Testing Required