Sr Cyber Security Analyst PSEG LI -Threat Intelligence

PSEG Long Island•Town of Oyster Bay, NY

56d•$107,600 - $170,300•Hybrid

About The Position

This position is an experienced, senior level, hands-on technical lead, performing cyber security incident response functions and maintaining systems, while providing technical guidance to the team. Reporting to the Security Ops and Incident Response lead. The Incident Response and threat intelligence specialist will be responsible for incident response and proactive cyber threat hunting. This role will be responsible to conduct in-depth investigations, contextualize incidents with PSEG Long Island-internal information, and drive containment and response actions with PSEG IT teams. Will provide technical leadership and direction during the duration of a security incident, leveraging all available detection and response tool suites within PSEG, including SIEM, EDR/XDR, email security, DNS filtering, and network security appliances, to analyze malicious artifacts and assist with forensic investigations.

Requirements

Bachelor’s degree and 6+ years of cybersecurity experience, or 10+ years without a degree.
Experience with security technologies including SIEM, IDS/IPS, EDR, DLP, encryption, antivirus, proxies, and network access control.
Strong incident response, threat analysis, and SIEM experience.
Experience developing and implementing incident response processes and procedures.
Ability to assess cyber threats, vulnerabilities, and attack vectors.
Broad knowledge of Windows, network security, operating systems, communications networks, and security tools.
Experience with firewalls, vulnerability management, identity and access management, malware protection, and security event analysis.
Knowledge of cloud security and protecting cloud environments.
Experience designing automated security response workflows.
Ability to work independently and collaboratively in a team environment.
Strong relationship-building skills with IT, management, and business stakeholders.
Ability to translate technical concepts into business terms.
Experience leading and coordinating cyber incident response activities.
Strong written and verbal communication skills with technical and non-technical audiences.

Nice To Haves

Security certifications such as CISSP, GIAC/SANS, or equivalent.

Responsibilities

Responds to and remediates email, endpoint, threat intelligence, and network-based threats; provides forensic investigation and support
Provides after-hours support as needed for response activities
Collaborates with cross divisional and Cybersecurity teams to continuously improve security capabilities and response to threats in the most efficient and effective manner
Assists with projects to implement advanced technologies to prevent & identify malicious behavior within cloud environments, networks, endpoints, and email technologies
Operates products such as SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR, cloud security products, IDS/IPS, , and other security technologies
Implements and performs threat analysis utilizing industry standard frameworks (kill chain/diamond model) and techniques
Proposes and helps review security plans and policies to improve environmental security
Maintains and produces metrics, operational playbooks, process diagrams and documentation for the Cybersecurity program
Produces and distributes operational and tactical threat intelligence reports
Other duties may be assigned as needed to address new security threats facing the enterprise
Assists in the investigation and resolution of security events and incidents.
Perform security event correlation, triage, and analysis
Apply security Threat Intelligence while responding to and investigating security events or Incidents
Develop Self and/or Others: Planning and supporting the development of knowledge, skills, and abilities to fulfil current or future job responsibilities more effectively
Champion Change: Actively engaging and supporting change and innovation by communicating the future- state, trying new approaches, and collaborating with others to make the change successful
Build Relationships: Building, leveraging, and maintaining relationships within and across work groups.
Leads and manages information security technologies
Provides technical expertise in threat/risk assessments
Defines, designs, and implements strategies to protect against emerging threats using security tools
Responds to security incidents
Performs security reviews on new technologies and changes to existing technologies.