Cybersecurity & OT Analyst OR Senior Cybersecurity & OT Analyst - Robinson Nuclear Plant

Duke Energy Corporation•Hartsville, SC

6d•Onsite

About The Position

This position supports the Robinson Nuclear Plant Cybersecurity Program and plant process computing network. The analyst responds to cybersecurity threats and events, owns digital-based components, supports the installation base, assists with testing and commissioning of new installations, and maintains existing digital systems. The program covers infrastructure assets including firewalls, data diodes, SIEM, industrial control systems, and other digital assets. The analyst analyzes and implements complex cybersecurity solutions addressing actual and potential threats to nuclear generation assets and equipment. The role coordinates with other departments and the Nuclear General Office to support nuclear safety and reliable plant operation. Work includes solving complex cybersecurity problems, participating in cybersecurity-impacting projects, preparing assessments, hardening critical digital assets (CDAs), and implementing the site’s Nuclear Cybersecurity Program to maintain a strong security posture and improve efficiency. The position also involves participation in industry working groups and building positive stakeholder relationships. The employee must meet site security access requirements, including General Employee Training, Radiation Worker Training, security clearance checks, and critical group membership, and is subject to the site Fitness for Duty Program. Periodic travel is required. Work is performed at a company facility, with employees required to live within a reasonable daily commute of no more than 50 miles one way. The role may include Emergency Response Organization responsibilities, callouts, and an on-call rotation. Occasional nights, weekends, or extended workdays may be necessary to support regulatory compliance, outages, or emergent equipment issues. Relocation assistance may be provided as applicable.

Requirements

Cybersecurity & OT Analyst level: Bachelor of Science in Engineering, Cybersecurity, or Computer Science and at least two years of related experience; alternatively, High School/GED and at least six years of related experience.
Senior Cybersecurity & OT Analyst level: Bachelor of Science in Engineering, Cybersecurity, or Computer Science and at least five years of related experience; alternatively, High School/GED and at least nine years of related experience.
Demonstrate basic knowledge of IT and cybersecurity policies, standards, processes, resources, and controls.
Meet nuclear site access requirements, including General Employee Training, Radiation Worker Training, security clearance checks, critical group membership, and Fitness for Duty requirements.
Be able to achieve nuclear site Unescorted Access.
Work safely in an industrial environment.
Live within a reasonable daily commute of the assigned work location, no greater than 50 miles one way.
Be able to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Nice To Haves

Experience with the nuclear cybersecurity program, including NEI standards NEI 08-09, NEI 13-10, and NEI 04-04.
Experience with NIST cybersecurity controls.
Demonstrated knowledge of technical and programmatic cybersecurity controls and protection strategies.
Demonstrated knowledge of computer networks, servers, and cybersecurity appliances such as firewalls, data diodes, and SIEM.
Experience with cybersecurity aspects of multiple platforms, operating systems, software, communications, and network protocols.
Working knowledge of Industrial Control Systems and Operational Technology (OT).
Working knowledge of programming languages such as PowerShell and VBA.
Working knowledge of Splunk Enterprise SIEM.
Working knowledge of OWL data diodes.
Ability to work effectively with personnel at all organizational levels, including clients, staff, and management.
Strong project management and leadership skills.

Responsibilities

Manage and support cybersecurity infrastructure, including team-owned digital platforms such as firewalls, data diodes, SIEM, industrial control systems, Microsoft products, and hypervisors.
Install software patches on firewalls, data diodes, SIEM, and other digital assets.
Serve as technical lead and architect for common digital components, systems, and cybersecurity-related software.
Prepare new cybersecurity documentation and maintain existing documentation.
Assess and respond to cybersecurity events and incidents.
Support the Robinson Nuclear Plant Cybersecurity Program and plant process computing network, including digital component ownership, installation base support, testing and commissioning of new installations, and maintenance of digital systems.
Analyze and implement complex cybersecurity solutions for threats to nuclear generation assets and equipment.
Coordinate with other departments and the Nuclear General Office to support nuclear safety and reliable plant operation.
Solve complex cybersecurity problems, participate in projects affecting cybersecurity, prepare cybersecurity assessments, and harden critical digital assets.
Contribute to implementation of the site’s Nuclear Cybersecurity Program and participate in industry working groups.
Provide technical and administrative support to other groups within the analyst’s area of expertise.
Build positive relationships with organizations, personnel, and stakeholders.
Accept new responsibilities and learn new concepts and technologies.