Cyber Security Analyst / Sr. Cyber Security Analyst

Dominion Energy • Richmond, VA

22h • $81,900 - $132,800 • Onsite

About The Position

Dominion Energy’s Cyber Security Group is seeking a dynamic, detailed oriented Cyber Security Analyst to perform security event and incident investigations within our CSOC operations. Ability to work with SIEM, endpoint security, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms. Related SIEM experience is a must. Related SOAR playbook and automation workflow experience is a must. Perform continuous network monitoring and response in a complex and massive environment. Located in historical and scenic downtown Richmond, Virginia, the selected candidate will serve as a Cyber Security Analyst in a Cyber Security environment. There is one position available and it will be filled at the level commensurate with the successful candidate's knowledge, skills, and abilities. This position will support an existing and mature environment and use cases. Under general supervision, works from specifications to develop or modify moderately complex use cases and notable.

Requirements

• Cyber Security Analyst- Must possess 3-5 years of work experience in cyber security or a cyber risk related role
• Senior Cyber Security Analyst-Must possess 5 years of work experience in cyber security or a cyber risk related role (level preferred)
• CSOC operations (not compliance) related SIEM experience is required.
• Security, Orchestration, Automation and Response (SOAR) experience OR 3 to 5 years of strong Python script writing experience gained through on the job experience is required.
• Demonstrates a strong understanding regarding the identification, gathering and analysis of information, threats, etc. to investigate and mitigate security risks or related IT networking experience (firewalls, CISCO, etc.).
• Demonstrates an strong understanding of cyber security and or data system protection principles and practices.
• Demonstrated good organization and planning skills.
• Demonstrates a questioning attitude, with basic analytical and investigative skills.
• Demonstrates verbal and written communication skills, with the ability to interact effectively with others.
• A willingness to learn new skills and methodologies, conduct research, and learn to maintain hardware, software and network firewalls and encryption.
• Ability to work cooperatively in a teamed environment.
• Highly motivated, with the ability to work effectively under basic supervision in a fast-paced environment.

Nice To Haves

• An understanding of industrial cyber security standards and risk are desired.
• Previous work experience or exposure to the security aspects governing software, communications, and network protocols is a plus.
• Certified IS Security Professional-CISSP

Responsibilities

• Design, develop, test, and maintain SOAR playbooks and automation workflows.
• Integrate security technologies including SIEM, EDR, ticketing systems, cloud platforms, and identity providers.
• Develop custom functions, REST API integrations, and reusable automation components.
• Troubleshoot SOAR execution failures, connector issues, and API communications.
• Experience working with commercial SIEM products including reporting, rule creation and modification, false positive tuning, and integration of threat feeds.
• A proven track record in working with common security tools.
• Perform security event and incident investigations.
• Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms.
• Perform continuous network monitoring and response.
• Ability to read and understand packet captures.

Benefits

• health, dental, and vision benefits with coverage for families and domestic partners
• vacation
• retirement plans including 401k contributions and matches
• paid holidays
• tuition reimbursement
• bonus eligibility
• sick leave
• disability insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level