Cyber Intelligence Consultant COS490

Xcel Energy•Denver, CO

14d

About The Position

Responsible for providing subject matter expertise / guidance on the detection, identification, evaluation and escalation of Cyber Threats. Provide expertise and execution in the day-to-day operations related to threat research, triage, coordination and resolution. Ensure all regulatory, contractual and internal security requirements are met in relation to the day-to-day operations and use of cyber security solutions, technology and procedures. Execute assigned tasks as part of an on-call rotation. Manage security risks and threats by collaborating with other business units, utilities, governmental agencies and security related communities to share information. Apply expert level business and technical acumen while defining security and compliance solutions that deliver best practices for building and monitoring controls for information protection and threat management.

Requirements

Bachelor's degree in MIS, Computer Science, Eng. or related or equiv. experience.
At least 5 years cyber security related experience, or any combination of related intelligence, investigations, IT or other relevant experience demonstrating equivalency.
At least 3 years demonstrated expertise business and technical acumen in developing and/or working with technical security or IT compliance solutions that deliver best practices for building and monitoring controls for information protection and threat management.
In-depth knowledge of IT systems and applications.
Superior communication skills.
Proven experience recommending innovative risk management or compliance solutions to support complex business requirements.
Superior relationship management, facilitation, project management, and problem solving skills.
Strong ability to coach and mentor less experienced team members.

Nice To Haves

Master of Science degree desired.
Relevant Information Security certifications and training desired.
Have an active SECRET or TS/SCI clearance or ability to obtain one

Responsibilities

Work directly with the Enterprise Vulnerability Management (EVM), SIEM, Incident Response and Investigations teams to identify emerging threats and vulnerabilities, and their potential impact on the company's technology and business operations.
Responsible for strategic management of key external security related relationships to ensure processes and controls are integrated to support company goals and policies for risk and compliance management.
Communicate effectively with senior management, key leadership, business peers, IT peers and vendors to solve business/technical problems and provide technical solutions.
Work directly with Business Systems management on escalated security concerns to ensure satisfactory.
Apply critical thinking and writing with a focus on attacker capability to destroy, degrade or deny access to systems and information.
Provide targeting analysis in support of all source collection activities.
Exploit large quantities of data and discover relationships and patterns.
Use knowledge, creativity, and analytic tradecraft best practices to obtain solutions to complex problems where analysis of situations or data requires an evaluation of intangible variables under conditions of uncertainty.
Participate in trend / correlation analysis and scenario forecasting at both the tactical and strategic level.
Participate in red teaming, war-gaming, and/or exercise development and execution.
Respond to ad-hoc vulnerability and threat related queries from technology and business users.
Research and craft analytic papers on strategic, geographical, and functional topics.
Develop a sophisticated understanding of cyber threat capabilities and intentions.
Identify new threat TTP and signatures used by cyber threat actors.
Ensure timely response to all suspense deadlines and administrative actions.
Responsible for maintaining confidentiality and ethics within the framework of the engagement.