Sr. Cyber Security Analyst - Threat Intelligence - Bethpage, NY
About The Position
PSEG Long Island is hiring an experienced, senior-level, hands-on technical lead for incident response and threat intelligence. Reporting to the Security Ops and Incident Response lead, this specialist performs cyber incident response, maintains systems, provides technical guidance to the team, and conducts proactive cyber threat hunting. The role investigates incidents in depth, contextualizes them using internal PSEG Long Island information, and coordinates containment and response actions with PSEG IT teams. It provides technical leadership throughout security incidents, using PSEG detection and response tools—including SIEM, EDR/XDR, email security, DNS filtering, and network security appliances—to analyze malicious artifacts and support forensic investigations. The role also leads information security technologies, provides expertise in threat and risk assessments, develops strategies to protect against emerging threats, responds to security incidents, and reviews new technologies and changes to existing technologies. The position is hybrid, with at least three onsite days per week, and may require after-hours support for response activities.
Requirements
- Bachelor’s degree and at least 6 years of cybersecurity experience, or at least 10 years of cybersecurity experience without a degree.
- Experience with security technologies including SIEM, IDS/IPS, EDR, DLP, encryption, antivirus, proxies, and network access control.
- Strong incident response, threat analysis, and SIEM experience.
- Experience developing and implementing incident response processes and procedures.
- Ability to assess cyber threats, vulnerabilities, and attack vectors.
- Broad knowledge of Windows, network security, operating systems, communications networks, and security tools.
- Experience with firewalls, vulnerability management, identity and access management, malware protection, and security event analysis.
- Knowledge of cloud security and cloud environment protection.
- Experience designing automated security response workflows.
- Ability to work independently and collaboratively in a team environment.
- Strong relationship-building skills with IT, management, and business stakeholders.
- Ability to translate technical concepts into business terms.
- Experience leading and coordinating cyber incident response activities.
- Strong written and verbal communication skills for technical and non-technical audiences.
Nice To Haves
- Security certifications such as CISSP, GIAC/SANS, or equivalent.
Responsibilities
- Respond to and remediate email-, endpoint-, threat intelligence-, and network-based threats; provide forensic investigation and support.
- Provide after-hours support as needed for response activities.
- Collaborate with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
- Assist with projects implementing advanced technologies to prevent and identify malicious behavior in cloud environments, networks, endpoints, and email technologies.
- Operate SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR, cloud security products, IDS/IPS, and other security technologies.
- Perform threat analysis using industry-standard frameworks and techniques, including the kill chain and diamond model.
- Propose and review security plans and policies to improve environmental security.
- Maintain and produce metrics, operational playbooks, process diagrams, and Cybersecurity program documentation.
- Produce and distribute operational and tactical threat intelligence reports.
- Assist with investigation and resolution of security events and incidents; perform event correlation, triage, and analysis.
- Apply threat intelligence when responding to and investigating security events or incidents.
- Develop self and others by supporting the development of knowledge, skills, and abilities for current or future responsibilities.
- Champion change and innovation by communicating future-state goals, trying new approaches, and collaborating with others.
- Build and maintain relationships within and across work groups.
- Lead and manage information security technologies.
- Provide technical expertise in threat and risk assessments.
- Define, design, and implement strategies to protect against emerging threats using security tools.
- Respond to security incidents and coordinate incident response activities.
- Perform security reviews of new technologies and changes to existing technologies.
- Perform other duties as needed to address new security threats facing the enterprise.
Benefits
- Hybrid work arrangement
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
