Cyber & Info Security Analyst (Sr and Staff levels)

STP Nuclear Operating Company • Wadsworth, TX

69d

About The Position

Responsible for technical advisement for Cyber Security requirements for the protection of all information processed, stored, or transmitted by STP computer systems. Directs the development and delivery of a comprehensive cyber security program and compliance functions as regulated by NRC, Electric Reliability Council of Texas (ERCOT), and Sarbanes-Oxley. Oversees the development of standards, policies, procedures, and guidelines which provide guidance and control of cyber security.

Requirements

• Bachelor degree in Engineering, Computer Science, or Information Systems (Preferred).
• 5 years’ experience in information technology, hardware/software maintenance, configurations and cyber security and risk management (without the above degree).
• 5 Years’ experience in cyber security administration and risk management (Required).
• CompTIA Security+, CompTIA CySA+, Certification in firewall Management (e.g., CCNA Security, PCNSE, NSE or equivalent), SOC Analyst Certification (e.g., EC-CSA, GIAC GCDA or equivalent) (Preferred).
• 8 Years experience in cyber security administration and risk management (for Cyber & Info Security Analyst Staff).
• Certified Information Systems Security Professional (Preferred).
• Microsoft Certified Solutions Expert (Preferred).
• Cisco Certified Network Professional (Preferred).
• Certified Ethical Hacker (Preferred).

Responsibilities

• Provides technical assistance and support to customers.
• Provides cyber security technical and operational guidance for the station to assure new business functionalities have the proper security controls and objectives identified, implemented, verified, and tested.
• Develops standards, policies, procedures, and guidelines which provide guidance and control of cyber security.
• Identifies, evaluates, conducts, schedules, and leads cyber security functions to ensure all applicable cyber security requirements are met.
• Reviews, recommends, implements, and maintains all security technology products within the security domain.
• Monitors and evaluates vulnerability information from various sources, security trends, best practices and effectively articulates mitigation guidance.
• Develops and implements Disaster Recovery (DR) strategies for Critical Digital Assets.
• Conducts cyber security investigations.
• Reviews hardware and software audits for compliance with established regulation, standards, policies, and procedures.
• Designs and deploys enterprise cyber security monitoring, detection, and incident response systems.
• Architects, designs, evaluates, and integrates information security infrastructure solutions.
• Plans, coordinates, and conducts detailed inquiries, assesses potential damage, and develops and implements corrective action plans.
• Provides analysis and/or reverse engineering of suspect source code including Trojans, Virus, back doors, and other known and previously unknown Malware.
• Monitors Cyber Security systems as assigned.
• Installs, configures, operates, and maintains cyber security equipment and log sources and logging technologies.
• Develops, leads, and administers security risk assessments and threat modeling.
• Approves proposed cyber security configuration modifications.
• Develops and delivers communications to senior management regarding strategic cyber security risks and threats.
• Oversees and responsible for mitigation response to cyber security audits, network scans, and penetration tests against Critical Digital Assets.
• Oversees and responsible for cyber security investigations involving the compromise of Critical Digital Assets.

What This Job Offers

• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees