Cybersecurity Specialist

NW Natural•Happy Valley, OR

9d•$88,700 - $157,100•Hybrid

About The Position

You’ll be a member of the Security Operations Team and collaborate with our team on projects and operational work, as part of our security program, focusing on vulnerability management. This a key role in a technology organization maturing its processes and modernizing its technology and you will work closely with Network, Cloud, and other technical teams. The primary purpose of this position is to ensure Information Technology & Services (IT&S) Department is compliant with state and federal regulations by identifying, evaluating, prioritizing, monitoring, and reporting on the effectiveness of operational controls within Information Technology (IT) and Operational Technology (OT) environments. Your responsibilities would include people, process, and technology. This position will be based at our office in downtown Portland, OR.

Requirements

Minimum five years of information security experience. Additional years of experience and demonstrated knowledge and complexity of assignments or experience required for level 3.
Bachelor’s degree in information security, related industry certifications, or equivalent combination of education and experience.
ITIL Foundations certified or successful completion within 90 days of starting.
US Citizenship required.
A solid understanding of network and information security priorities, protocols, and concepts.
Scripting knowledge (e.g., PowerShell, Python, or Bash).
In-depth knowledge of information security principles and considerable practical experience.
Technical knowledge of mainstream Windows and Linux operating systems, complex applications, identity and access management technologies, SIEM, or endpoint security solutions.
Strong technical communication skills will be key to your success. Your written and verbal communication skills will help you succeed, as will your ability to communicate security concepts and situations to audiences with varying levels of familiarity with these concepts.
Leadership abilities with the capability to direct other technical staff on security initiatives and guide team members.
Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
Your ability to manage expectations appropriately will help and build long-term relationships.
You’ll remain current with industry trends and evolving threats.

Nice To Haves

Candidates must reside within commuting distance of the office or be willing to relocate to the Portland metropolitan area.

Responsibilities

Identify new vulnerabilities in our environment using tools such as Windows Defender, Nessus Professional, Tenable, System Center Configuration Manager, Dragos, and Intune
Evaluate and prioritize vulnerabilities
Monitor vulnerability remediation to confirm compliance with defined timelines
Develop reports on vulnerabilities in order to identify trends and communicate changes
Provide subject matter expertise to both project teams and operational teams
Implement vulnerabilities management best practices
Conduct false positive validation
Work with managed service providers to implement new configurations, apply product/content updates, and inform the analysis of security alerts with vulnerability management context
Develop routine processes and scripts for identifying and remediating issues with software agents
Troubleshoot issues in vulnerability management tools (e.g., scan engines down, agents not reporting to console, credential failures)
Conduct periodic health checks
Own remediation tracking process
Manually validate vulnerabilities and remediation
Develop and report on key performance indicators to show the effectiveness of our vulnerability management processes as well as our managed service provider
Research, evaluate, design, test, recommend, plan, implement, and administer new or updated security technologies.
Collaborate on projects with staff and vendors to ensure that security issues are addressed throughout the project lifecycle.
Review system designs and identify areas for security improvements, including cloud and network systems.
Provide ad hoc consulting on tactical security topics.
Develop and revise cybersecurity policies and standards.
Review alerts from security monitoring tools.
Respond to security incidents, including leading the response for smaller incidents.
Apply NW Natural context to potential incidents to better understand them.
Liaise between incident response leads and subject matter experts.
Research and assess new threats and vulnerabilities.
Evaluate security risks and their impact to NW Natural.
Create technical documentation for other analysts and teams.
Present technical solutions or recommendations to peers and leadership and provide updates on technical issues.
Provide training to less experienced team members and colleagues

Benefits

Rich health insurance benefits with competitive employer contribution
Free access to an online wellness resources platform
Up to 23 Vacation Days
80 Hours of Sick Time
10 paid holidays and 3 floating holidays
3 weeks paid parental leave
Be part of a workplace where your voice matters. Engage with our Diversity, Equity & Inclusion Council, and a variety of Employee Resource Groups that support community and growth.
1500 sq foot exercise facility and secure bike room
Meaningful annual incentive bonus opportunity in addition to base salary
Competitive 401K company contribution and match
15% discount on NW Natural stock through Employee Stock Purchase Program
Up to $5250 a year in tuition reimbursement
Wellness incentive program
20% off natural gas service
Up to 30% discount at NW Natural Appliance Center
TriMet Pass for all HQ employees
Generous discounts with Verizon & AT&T Wireless