Cyber Security Analyst / Sr Cyber Security Analyst (CSOC)

Dominion Energy•Richmond, VA

4d•Onsite

About The Position

Dominion Energy’s Cyber Security Group is seeking a dynamic, detailed oriented Cyber Security Analyst to perform security event and incident investigations within our CSOC operations. Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms. Related SIEM experience is a must. Perform continuous network monitoring and response in a complex and massive environment. Located in historical and scenic downtown Richmond, Virginia, the selected candidate will serve as a Cyber Security Analyst in a Cyber Security environment. This position will support an existing and mature environment and use cases. Under general supervision, works from specifications to develop or modify moderately complex use cases and notable.

Requirements

Must possess 3-5 years of work experience in cyber security or a cyber risk related role (Cyber Security Analyst)
Must possess 5 years of work experience in cyber security or a cyber risk related role (Senior Cyber Security Analyst - level preferred)
CSOC related SIEM experience is required.
Demonstrates a strong understanding regarding the identification, gathering and analysis of information, threats, etc. to investigate and mitigate security risks or related IT networking experience (firewalls, CISCO, etc.).
A Master's degree will count as one year of experience. A partial year of six months or more will be rounded up to one year.

Nice To Haves

An understanding of industrial cyber security standards and risk are desired.
Previous work experience or exposure to the security aspects governing software, communications, and network protocols is a plus.
Certified IS Security Professional-CISSP
The following Certifications from SANS: GCED, GWAPT, GSEC, GICSP, GCIH, GPEN, GCLD, GCFA, GCTD, GIAC.

Responsibilities

Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms.
Experience working with commercial SIEM products including reporting, rule creation and modification, false positive tuning, and integration of threat feeds.
A proven track record in working with common security tools.
Perform security event and incident investigations.
Perform continuous network monitoring and response.
Ability to read and understand packet captures.