Plant Cyber Security Analyst

Energy Northwest•Richland, WA

7d•$83,125 - $164,806•Onsite

About The Position

Energy Northwest is seeking a seasoned Cyber Security Analyst with deep experience in SIEM tuning and SIEM system management to support our highly segmented and stable plant network environment. While traditional real‑time monitoring and forensic analysis are infrequent due to strong isolation boundaries, this role is critically centered on analytical review and optimization of our existing SIEM implementation. The ideal candidate will be adept at evaluating what the system is actually monitoring, identifying meaningful signals, and refining alerting logic so that only high‑value, actionable alerts surface to the operations team. This position also supports the broader responsibilities outlined in the Plant Cyber Security Analyst PDs, including designing and maintaining cybersecurity controls, supporting documentation correctness, and ensuring alignment with regulatory expectations. This role additionally requires strategic ownership of SIEM platform health—developing maintenance plans, handling upgrades, and improving system resilience and efficiency. Candidates will be expected to explore automation opportunities, streamline system workflows, and integrate SIEM output into enterprise ticketing systems to ensure clean, efficient security operations. As reflected in the position descriptions, success in this role depends on strong analytical thinking, disciplined documentation practices, and the ability to serve as a knowledgeable resource across plant organizations. Applicants who excel at simplifying complexity, improving the fidelity of cybersecurity controls, and advancing automation within a regulated operational environment will thrive in this position.

Requirements

Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university and 5 years of relevant information technology experience; OR Associate’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university and 7 years of relevant information technology experience; OR High school diploma or GED with 11 years of relevant information technology experience and a current industry-recognized Cyber Security certification.
Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university and 3 years of relevant information technology experience; OR Associate’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university and 5 years of relevant information technology experience; OR High school diploma or GED with 9 years of relevant information technology experience and a current industry-recognized Cyber Security certification.
Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university; OR Associate’s degree in Cyber Security, Computer Science, Information Technology, or a related discipline from an accredited college or university with 2 years of relevant information technology experience; OR High school diploma or GED with 6 years of relevant information technology experience and a current industry-recognized Cyber Security certification.
Deep experience in SIEM tuning and SIEM system management.
Analytical review and optimization of SIEM implementation.
Evaluating what the system is actually monitoring, identifying meaningful signals, and refining alerting logic.
Designing and maintaining cybersecurity controls.
Supporting documentation correctness.
Ensuring alignment with regulatory expectations.
Strategic ownership of SIEM platform health.
Developing maintenance plans, handling upgrades, and improving system resilience and efficiency.
Explore automation opportunities, streamline system workflows, and integrate SIEM output into enterprise ticketing systems.
Strong analytical thinking.
Disciplined documentation practices.
Ability to serve as a knowledgeable resource across plant organizations.
Simplifying complexity.
Improving the fidelity of cybersecurity controls.
Advancing automation within a regulated operational environment.

Responsibilities

Design and implement security controls for digital computer and communication systems.
Conduct vulnerability assessments to identify potential security weaknesses and recommend appropriate measures.
Monitor and analyze network traffic in a supervisory control and data acquisition (SCADA) environment to detect and respond to cyber threats.
Prepare and maintain documentation related to cybersecurity policies, procedures, and incident response plans.
Conduct activity oversight and documentation reviews to ensure adherence to site procedures and regulatory requirements.
Lead program change impacts, self-assessments, audits, and training with impacted organizations.
Stay updated on the latest cybersecurity trends, threats, and regulatory requirements.
Must participate on the Emergency Response team (ERO) when designated.
Must support the biennial refueling outage.
Must support plant cyber security on-call rotation when designated.

Benefits

Substantial retirement benefits through three retirement programs including the Washington State Public Employees' Retirement System pension plan (PERS), a 401(k) savings plan with an employer match component, and a 457(b) savings plan.
Multiple options for medical, dental, vision, disability and life insurance coverage.
Flexible spending accounts (FSAs).
Tuition reimbursement.
Student loan repayment.
Childcare subsides.
Health reimbursement arrangement (HRA VEBA).
Health savings account (HSA).
Supplemental life insurances.
Credit monitoring/identity theft insurance.
Personal time accrual rate of 160 hours per year.
Nine paid holidays throughout the Calander year.