Cyber Security Analyst / Sr Cyber Security Analyst (CSOC)

Job Summary

Dominion Energy’s Cyber Security Group is seeking a dynamic, detailed oriented Cyber Security Analyst to perform security event and incident investigations within our CSOC operations. Ability to work with endpoint security, SIEM, IDS, networkprotocol analyzer, open-source Intelligence, and incident response platforms. Related SIEM experience is a must. Perform continuous networkmonitoring and response in a complex and massive environment.

Located in historical and scenic downtown Richmond, Virginia, the selected candidate will serve as a Cyber Security Analyst in a Cyber Security environment. This position will support an existing and mature environment and use cases. Under general supervision, works from specifications to developor modify moderately complex use cases and notable.

Duties include but not limited to:

• Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, andincident response platforms.
• Experience working with commercial SIEM products including reporting, rule creation and modification, falsepositive tuning, and integration of threat feeds.
• A proven track record in working with common security tools.
• Perform security event and incident investigations.
• Perform continuous network monitoring and response.
• Ability to read and understand packet captures.

One position is available which will be filled at the level commensurate with the successful candidate’s education, experience, knowledge, skills, and abilities. Preference will be given to hire at the senior level rather than the mid-level for this posting.

Required Knowledge, Skills, Abilities & Experience

Cyber Security Analyst- Must possess 3-5 years of work experience in cyber security or a cyber risk related role

Senior Cyber Security Analyst-Must possess 5 years of work experience in cyber security or a cyber risk related role (level preferred)

CSOC related SIEM experience is required.

Demonstraes a strong understanding regarding the identification, gathering and analysis of information, threats, etc. to investigate andmitigate security risks or related IT networking experience (firewalls, CISCO, etc.). (Note: A Master's degree will count as one year of experience. A partial year of six months or more will be rounded up to one year).

Specific knowledge, skills, abilities and experience

• Demonstrates an strong understanding of cyber security and or data system protection principles and practices.
• An understanding of industrial cyber security standards and risk are desired. Demonstrated good organization and
  planning skills.
• Demonstrates a questioning attitude, with basic analytical and investigative skills.
• Demonstrates verbal and written communication skills, with the ability to interact effectively with others.
• A willingness to learn new skills and methodologies, conduct research, and learn to maintain hardware, software and network firewalls
  and encryption.
• Ability to work cooperatively in a teamed environment.
• Highly motivated, with the ability to work effectively under basic supervision in a fast-paced environment.
• Previous work experience or exposure to the security aspects governing software, communications, and network protocols is a plus.

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education: Bachelor

Preferred Discipline(s): Computer Science; Engineering; Information Systems; Information Systems Security

Other disciplines may be substituted for the preferred discipline(s) listed above

Licenses, Certifications, or Quals Description

Preferred; Certified IS Security Professional-CISSP; The following Certifications from SANS: GCED, GWAPT, GSEC, GICSP, GCIH, GPEN, GCLD,GCFA, GCTD,GIAC.

Working Conditions

Other Working Conditions

Test Description

No Testing Required