Cyber Security Sr Analyst / Specialist - Power Generation Industrial Control Systems and OT

Dominion Energy•Cayce, SC

148d•Onsite

About The Position

Dominion Energy South Carolina is seeking a skilled and self-motivated Generation Cyber Security Senior Analyst or Specialist to join our team in Cayce, SC. The position will be filled at the level commensurate with the successful candidate's education, experience, knowledge, skills and abilities. This role collaborates with Power Generation stations, contractors, IT, and internal departments to support Industrial Control System (ICS) and Operational Technology (OT) cyber security, compliance, modernization, and lifecycle support. It involves supporting system architecture development, installation, connectivity, troubleshooting, upgrades, and ensuring compliance with NERC CIP, Dominion Energy ICS Cyber Security Standards, and other regulatory frameworks. The role provides hands-on support with computer, software, and network device implementations, logging and monitoring tools, operating system and application patches and updates, account management and review, security hardening, modifications, troubleshooting, and replacement. Additionally, it facilitates projects, maintains documentation, develops policy procedures, performs security assessments, and prepares reports for corporate and regulatory entities. The position requires staying current on cybersecurity trends, technologies, and regulatory requirements to implement mitigations. It acts as a liaison between IT and plant operations, coordinating resources and overseeing quality assurance for control systems and cybersecurity. Scheduling and supporting computer system maintenance, communications, and improvements with internal teams and contractors is also part of the role, which often includes travel during planning and implementation. Other duties as requested or assigned.

Requirements

Minimum of 5+ years of experience in operational technology (ICS) cyber security, system administration, networks, firewalls, and management of Windows operating systems security (for Senior Analyst level).
Minimum of 7+ years of experience in operational technology (ICS) cyber security, system administration, networks, firewalls, and management of Windows operating systems security (for Specialist level).
Strong understanding of ICS cybersecurity principles, including CISA and NIST guidance and NERC CIP compliance requirements.
Skilled in interpreting compliance requirements and translating them into actionable procedures, job aids, reports, and record-keeping systems.
Experienced in project management, scheduling, and coordination.
Strong organizational, analytical, and problem-solving skills.
Hands-on experience administering security technologies and tools including antivirus, whitelisting, malware prevention, asset inventory systems, operating system upgrades, workstation and server hardening.
Proficient working with Industrial Control Systems, including Distributed Control Systems (DCS) and Programmable Logic Controllers (PLC).
Proficient working with industrial communications protocols such as OPC, Modbus and DNP (both ethernet and serial).
Effective communicator with strong verbal, written, and presentation skills.
Ability to excel in both independent and team environments under pressure.

Nice To Haves

Manages industrial control system (ICS) networks, switches, and firewalls, with experience in incident analysis, root cause investigation, and resolution.
Experience working in a Power Generation Utility or Industrial Manufacturing setting.
Cyber Security and Network Certifications.
GICSP (Global Industrial Cyber Security Professional).
CISSP (Certified Information Systems Security Professional).
SSCP (Systems Security Certified Practitioner).

Responsibilities

Support Industrial Control System (ICS) and Operational Technology (OT) cyber security, compliance, modernization, and lifecycle support.
Support system architecture development, installation, connectivity, troubleshooting, and upgrades.
Ensure compliance with NERC CIP, Dominion Energy ICS Cyber Security Standards, and other regulatory frameworks.
Provide hands-on support with computer, software, and network device implementations.
Implement and manage logging and monitoring tools.
Perform operating system and application patches and updates.
Manage and review accounts.
Perform security hardening, modifications, troubleshooting, and replacement of systems.
Facilitate projects.
Maintain documentation.
Develop policy procedures.
Perform security assessments.
Prepare reports for corporate and regulatory entities.
Stay current on cybersecurity trends, technologies, and regulatory requirements to implement mitigations.
Act as a liaison between IT and plant operations, coordinating resources and overseeing quality assurance for control systems and cybersecurity.
Schedule and support computer system maintenance, communications, and improvements with internal teams and contractors.
Travel during planning and implementation as needed.
Perform other duties as requested or assigned.