Assoc Cybersecurity & OT Analyst - Intern/Co-op Conversion 2027

Duke Energy•Huntersville, NC

1d•Onsite

About The Position

This is the entry level of the Cybersecurity & OT Analyst classification hierarchy. Employees at this entry level solve problems in information and operational technological areas of specialization with close supervision. Incumbents are expected to develop skills, and the ability to work with greater independence. They have knowledge of fundamental concepts and procedures. Information Technology and Operational Technology are the specialty areas of expertise for this position as it relates to the nuclear simulator, nuclear design engineering deliverables, nuclear plant engineering , or any other activity that requires extensive knowledge, management, administration or ownership of these types of digital systems. Roles of this position are not limited to IT and OT areas, and would be expanded as the needs of the nuclear business team warrant. This position will support the Cybersecurity program for operational assets. The Ops Cybersecurity organizations provide direct service and support to generating stations in their assigned business unit. This work will ensure compliance with the Duke Energy enterprise cybersecurity requirements. This includes response to cybersecurity threats and events as well as implementation of the cybersecurity program. The cybersecurity programs include all infrastructure asset security including but not limited to firewalls, endpoint protection, and industrial control systems (ICS.) The work includes hands on activities such as patching, antivirus protections, account management, cyber asset inventory, and security baselines. The associate analyst is responsible for day-to-day activities in support of the cybersecurity program and policies. This may include maintenance (patching and upgrades), support of new installations, response to identified threats and vulnerabilities, and other items, as directed. The associate analyst will also contribute to ongoing development and improvement of the Cybersecurity Program intended to maintain a strong security posture. This may include revision of program documentation as well as participation in design and implementation of projects that impact security. This position requires understanding of the integrated generating plant systems as well as processes to secure plant cyber assets. The analyst shall demonstrate an understanding of the impact of cybersecurity processes on generating systems and the overall electric grid.

Requirements

Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Experience in the technical aspects of multiple digital technologies and platforms, operating systems, software, communications and network protocols.
Working Knowledge of network architecture and firewall security.
Working knowledge of configuration and design of cybersecurity appliances.
Working knowledge of IT or OT virtualized environments.
Duke Energy internship or co-op experience.

Responsibilities

Support the Cybersecurity program for operational assets.
Provide direct service and support to generating stations in their assigned business unit.
Ensure compliance with Duke Energy enterprise cybersecurity requirements.
Respond to cybersecurity threats and events.
Implement the cybersecurity program, including all infrastructure asset security (firewalls, endpoint protection, ICS).
Perform hands-on activities such as patching, antivirus protections, account management, cyber asset inventory, and security baselines.
Manage day-to-day activities in support of the cybersecurity program and policies.
Perform maintenance (patching and upgrades).
Support new installations.
Respond to identified threats and vulnerabilities.
Contribute to the ongoing development and improvement of the Cybersecurity Program.
Revise program documentation.
Participate in the design and implementation of projects that impact security.
Understand integrated generating plant systems and processes to secure plant cyber assets.
Demonstrate understanding of the impact of cybersecurity processes on generating systems and the overall electric grid.