Cybersecurity Operations Analyst (CSOC Analyst)

Central Hudson Gas & Electric•Poughkeepsie, NY

20d

About The Position

Central Hudson is seeking a diligent Cybersecurity Operations Analyst (CSOC Analyst) to join its Information Technology and Cybersecurity team. The analyst monitors, detects, and responds to security incidents to protect the organization's critical assets, working with internal stakeholders, vendors, and other IT and security teams. The position participates in a 24/7 rotating-shift environment, on-call rotations as needed, and storm and emergency response. The title and level are commensurate with experience, and the position offers advancement opportunities within a job series.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; alternatively, an associate degree in one of these fields plus 3 years of cybersecurity operations or related experience, or a high school diploma or equivalency plus 5 years of cybersecurity operations or related experience.
Knowledge of common and emerging attack vectors, penetration methods, and countermeasures.
Proficiency with SIEM and EDR tools.
Understanding of a broad range of security technical concepts.
Familiarity with scripting languages for automation and analysis.
Effective communication and collaboration skills, including the ability to explain complex concepts clearly and concisely.
Excellent analytical, multitasking, and organizational skills.
Excellent decision-making skills.
Ability to work with limited direct supervision and respond professionally to constructive feedback.
Ability to work 24x7x365 rotating shifts, including nights, weekends, and holidays.
Valid driver’s license.

Nice To Haves

At least 2 years of experience performing CSOC Analyst duties.
Experience conducting risk assessments, developing risk mitigation strategies, and evaluating contractual agreements.
Experience in the Energy & Utilities or services industry.
Experience with threat hunting.
Experience with data visualization tools.
Relevant certifications such as Systems Security Certified Practitioner (SSCP), CompTIA Security+, or CompTIA Cybersecurity Analyst (CySA+).

Responsibilities

Continuously monitor security events using SIEM systems, intrusion detection/prevention systems, endpoint protection, and other security tools.
Respond to and investigate incidents such as malware infections, phishing attacks, compromised assets, and unauthorized access attempts.
Analyze logs and correlate data from multiple sources to identify suspicious activity, incidents, patterns, and trends.
Triage and prioritize alerts by severity and potential impact, escalating incidents as needed.
Prepare detailed incident reports documenting findings, actions, and prevention recommendations; provide status updates to management and stakeholders.
Collaborate with IT and security teams on incident management and response.
Monitor news, security websites, and threat-actor activity channels for emerging threats.
Participate in efforts to improve SOC processes, tools, and capabilities.
Proactively hunt for threats and vulnerabilities in the corporate environment.
Review, analyze, and act on threat intelligence.
Keep current with emerging cybersecurity threats and technologies.
Promote cybersecurity awareness by educating others.
Build relationships with government and local agencies to support collaborative information sharing.
Work rotating 24/7 shifts, including nights, weekends, and holidays; participate in on-call rotations as needed.
Provide storm and emergency response support.