Asc Cybersecurity Threat & Vulnerability Analyst - Intern/Co-op Conversion 2026-2027

Duke Energy Corporation•Charlotte, NC

3d•Onsite

About The Position

The Cybersecurity Threat and Vulnerability Analyst is responsible for identifying, analyzing, prioritizing, and eradicating cyber threats and vulnerabilities across the Duke Energy environment. The Analyst will analyze threat information and work closely with peers, other internal/external teams and management to ensure that information is properly disseminated to appropriate parties for action. The Analyst assists with supporting tools which perform vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis. The Analyst also is responsible for following processes and procedures as defined by Cybersecurity leadership and the Threat & Vulnerability Management team.

Requirements

Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Experience researching and assessing cyber threats and vulnerabilities
Knowledge of attack methods and techniques (DDoS, brute force, spoofing, etc.)
Knowledge of cyber intelligence/information collection capabilities and repositories.
Knowledge of cybersecurity domains, security practices, and cyber defense models, such as the Cyber Kill Chain® methodology & MITRE's ATT&CK Framework®
Knowledge of telecommunications fundamentals and common networking and routing.
Knowledge of general networking understanding and/or experience to include Understanding of TCP/IP communications & knowledge of how common protocols and applications work at the network level, including DNS, HTTP, and SMB
Knowledge of intelligence disciplines
Knowledge of internal tactics to anticipate and/or emulate threat capabilities and actions
Ability to utilize multiple intelligence sources across all intelligence disciplines
Windows and UNIX/Linux command line scripting experience and programming experience (Python, Powershell, etc).
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on threats and vulnerabilities and provide briefings to various levels of staff / management.
Ability to function effectively in a dynamic, fast paced environment
Ability to research independently, multi-task, and meet deadlines under tight timeframes
Ability to develop and maintain good working relationships with internal and external business partners
Experience with writing and editing technical documentation and operational procedures
Experience in developing and improving work processes
Demonstrated effective problem solving & analytical skills
Knowledgeable of Duke Energy’s Cybersecurity policies
Innovative – ability to recognize and seek improvement and efficiency opportunities
Demonstrated commitment to training, self-study and maintaining proficiency in the technical cybersecurity domain.

Responsibilities

Identifying, analyzing, prioritizing, and eradicating cyber threats and vulnerabilities
Analyzing threat information and disseminating it to appropriate parties for action
Assisting with supporting tools for vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis
Following processes and procedures as defined by Cybersecurity leadership and the Threat & Vulnerability Management team