SCADA Cybersecurity Analyst (6A.25)

American States Water Company • Eglin Air Force Base, FL

303d • $80,826 - $137,534

About The Position

The SCADA Cybersecurity Analyst (CSA) is responsible for assisting with the day-to-day operations of securing the Company's various SCADA systems. The CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the Corporate Information Technology Department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA administers the Company's vulnerability management program, annual cybersecurity assessments and penetration tests, and researches and reports on emerging threats to help the company take pre-emptive risk mitigation steps.

Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Telecommunications, or any related field OR three to five years related experience
• Requires broad knowledge of complex systems and procedures
• Experience with managing and securing both on premise and hosted systems and applications
• Experience with application and database security
• Ability to work independently with minimal supervision
• Must possess and maintain a valid Driver's License issued by the state where employed

Nice To Haves

• Desired Certifications and/or coursework: CompTIA (Network+, Security+, CySA+), ISC2 (CC, SSCP), SANS/GIAC (SEC401/GSEC, ICS410/GICSP, SEC450/GSOC, ICS456/GCIP, SEC503/GCIA, ICS515/GRID), ISACA (ITCA, CCOA), EC-Council (CND, ICS/SCADA Cybersecurity)

Responsibilities

• Manages the security posture of SCADA systems owned by the Company
• Maintains policy, process, and procedure documentation related to the Department of Defense Cybersecurity Maturity Model Certification (CMMC) Program
• Audits SCADA systems to ensure compliance with CMMC requirements
• Proactively monitors the environment to detect and implement steps to mitigate cyber-attacks before they occur
• Provides technical expertise regarding security-related concepts to operational teams within the Information Technology Department and the business
• Reviews, investigates, and responds to real-time alerts within the environment
• Reviews real-time and historical reports for security and/or compliance violations
• Monitors online security-related resources for new and emerging cyber threats
• Assesses new security technologies to determine potential value for the company
• Conducts vulnerability assessments of firm systems and networks
• Travel will be required as needed for, but not limited to, ASUS system reviews, meetings, conferences and site surveys of potential new contract locations

What This Job Offers

• Industry: Utilities
• Education Level: Bachelor's degree