Associate Operations Cybersecurity Analyst OR Operations Cybersecurity Analyst - Oconee Nuclear Station Engineering

Duke Energy•Seneca, SC

4d•Onsite

About The Position

The Operations Cybersecurity Analyst provides support for nuclear site process computers, various plant control and data acquisition systems such as the Operator Aid Computer (OAC), Security Computer system, OSI/PI Systems, Security Event and Information Management System (SIEM), Plant Network System, Emergency Preparedness System (EPNET), Process Control System as required. This position will also contribute with other site peers to the ongoing development and revision of the Nuclear Cyber Security Program to maintain a strong cyber security posture and improve efficiency. This position requires understanding of the integrated generating plant systems as well as processes to secure plant cyber assets. The analyst shall demonstrate an understanding of the impact of cybersecurity processes on generating systems and the overall electric grid.

Requirements

Associate Operations Cybersecurity Analyst Associates Degree or Associate’s Degree in Computer Science or Engineering In lieu of Associate degree, high school diploma/GED and 2 years of direct related experience
Operations Cybersecurity Analyst Bachelor’s degree in Engineering, Cybersecurity, or Computer Science and 2 years' direct related experience.
In lieu of Bachelor’s degree, high school diploma/GED and 6 years direct related experience
Able to achieve nuclear site Unescorted Access.
This position may be required to have Emergency Response Organization (ERO) responsibilities which could include callouts with a defined response time to the site and an on-call duty rotation requiring the employee to be Fit for Duty.
Occasional work during nights and weekends or extended workdays may be necessary to support nuclear regulatory compliance, unit outages, or emergent equipment issues callouts.
Typical Office environment with flexibility to support plant operations.
Must be able to work in an industrial environment safely.

Nice To Haves

Previous Nuclear Cyber Security experience and familiarity with NEI 08-09, NEI 10-04, NEI 10-08, or 10 CFR 73.54 NRC Cyber Rule.
Experience with NIST cyber security controls.
Demonstrated knowledge of technical and programmatic cyber security controls and protection strategies
Demonstrated knowledge of computer networks, servers, and cyber security related appliances (firewalls, and SIEM).
Experience in the security aspects of multiple platforms, operating systems, software, communications and network protocols.
Working knowledge of Industrial Control Systems (ICS) Cyber Security and Operational Technology (OT)
Working Knowledge of various programing languages (PowerShell, VBA, etc.)
Working Knowledge of Splunk Enterprise SIEM
Demonstrated ability to work effectively with personnel at all levels of the organization (client, staff, management, etc.)
Demonstrated project management and leadership skills.
Excellent analytical ability, consultative, and communications skills

Responsibilities

Provide troubleshooting and repair support, updates, vulnerability patching and back-ups for various plant digital systems and firewalls.
Assist in development and revision of the ongoing strategy of the Nuclear Cyber Security Program and make change where possible to improve efficiency and compliance.
Provide technical expertise and guidance in the identification, analysis and resolution of problems for digital control and data acquisition systems.
Access and respond to cyber security events and incidents.
Perform reviews for Engineering Change (EC) development for cyber and Digital Process System (DPS) team aspects
Basic knowledge of IT and Cybersecurity policy, standards, processes, resources, and controls
Provide technical and administrative support to other groups to assist with the cyber security program and OAC requirements.
Participate in the Team’s duty rotation.
Build positive relationship with different organizations and personnel.
Willingness to accept new responsibilities and be eager to learn new concepts and technologies.