Staff Network Security Operations Analyst

Portland General Electric • Tualatin, OR

1d • Hybrid

About The Position

PGE's Network Security Operations team is seeking a Staff Network Security Operations Analyst to support and administer two critical security platforms: Splunk (SIEM) and Palo Alto Firewalls. This role is based out of our Tualatin / Sherwood location and reports within the Network Security Operations function. While this role is not a SOC analyst role, we are looking for someone who builds, configures, owns, and manages the platforms that security operations teams rely on — not someone who monitors dashboards. You will be the person who makes the magic happen behind the scenes, setting up indexes, configuring logging, tuning alerts, and ensuring the platform runs optimally for our internal cybersecurity customers. Additionally, this role has a strong automation focus. You will identify repetitive administrative tasks and proactively develop automated solutions to improve efficiency across the team.

Requirements

• Requires a bachelor’s degree in an IT discipline or other related field or equivalent experience.
• Two or more years of progressive IT operations experience focusing on systems or networking support in an enterprise and/or data center environment.
• Splunk Administration experience: Hands-on platform administration (not end-user/SOC usage)
• Palo Alto Firewall Administration experience: Current, working knowledge
• Coding proficiency: Python and/or PowerShell required
• Automation mindset - Demonstrated ability to identify and automate manual or repetitive processes
• Self-starter: Ability to work independently, troubleshoot without step-by-step guidance, and take initiative
• Adaptability: Comfortable with change and evolving priorities in a fast-paced IT environment
• Requires a valid Driver’s License and a history of safe driving practices.
• Working knowledge of Palo Alto NGFW, f5 Networks, Network Security systems, Cisco routing and switching technologies.
• Working knowledge and support of network security functions.
• Working knowledge of scripting and automation.
• Working knowledge of Firewall rule management and policy optimization.
• Working understanding of ITIL or other service operations framework.
• Working knowledge of Cloud networking and security practices in Azure, AWS, and Google.
• Working knowledge of Zero Trust architectures for infrastructure and applications environments.
• Working knowledge Routing Protocols and how to troubleshoot: EIGRP, BGP, RIP-2, PBR, Route Filtering, Redistribution, Summarization.

Nice To Haves

• 2-4 years of relevant experience in network security operations or IT infrastructure
• Familiarity with NERC CIP compliance frameworks
• Experience in a role where you administered or built SIEM platforms (not just consumed alerts)
• Exposure to security operations environments where you owned platform configuration end-to-end
• Demonstrated examples of automation projects (scripts, tools, or workflows you built independently)
• Certifications within technical disciplines preferred.

Responsibilities

• Own and manage PGE's Splunk SIEM platform, including index configuration, log ingestion, alert tuning, and system maintenance.
• Configure, manage, and maintain Palo Alto firewall infrastructure.
• Identify opportunities to automate repetitive administrative tasks using Python, PowerShell, or other scripting tools.
• Serve as a technical resource for cybersecurity teams who rely on the platforms you manage.
• Contribute to initiatives supporting NERC CIP regulatory compliance requirements.
• Proactively diagnose and resolve platform issues with minimal direction.
• Work closely with internal cybersecurity and IT teams as a key platform partner.
• Conducts active monitoring, triage, remediation, or escalation of events within the IT environment, including network security, security policy, policy enforcement and auditing, policy creation, network routing and switching, internet / intranet security posture, server, and workflow automation of tasks to support proactive network security operational awareness.
• Performs development and implementation of PGE’s network security practices and programs.
• Supports and performs administrative functions on network security infrastructure and applications.
• Identifies and resolves issues with network security, following agreed procedures.
• Uses network security management software and tools to collect agreed performance statistics.
• Carries out agreed network security maintenance tasks.
• Perform network security tasks such as network/system troubleshooting, assist with root cause analysis, patching infrastructure components, support network security and infrastructure deployments, identify automation opportunities and author automation scripts.
• Carries out agreed operational procedures, including network security configuration, installation, and maintenance.
• Uses network security management tools to collect and report on network security, risk, and performance statistics.
• Contributes and performs implementation, maintenance, and installation work.
• Uses standard procedures and tools to carry out defined system backups, restoring data where necessary.
• Identify operational problems and contributes to their resolution.
• Following agreed procedures, identifies, registers, and categorizes security incidents.
• Gathers information to enable security incident resolution and promptly allocate incidents as appropriate.
• Maintains records and advises relevant persons on actions taken.
• Installs or removes hardware and/or software, using supplied installation instructions and tools, including, where appropriate, handover to the client.
• Conducts tests, corrects malfunctions, and documents results in accordance with agreed procedures.
• Reports details of all hardware/software items that have been installed and removed so that configuration management records can be updated.
• Aids users in a professional manner following agreed procedures for further help or escalation.
• Maintains accurate records of user requests, contact details and outcomes.
• Contributes to the development of installation procedures and standards.
• Acts as the routine contact point, receiving and handling requests for support.
• Responds to a broad range of service requests for support by providing information to fulfill requests or enable resolution.
• Provides first-line investigation and diagnosis and promptly allocates unresolved issues as appropriate.
• Assists with the development of standards and applies these to track, monitor, report, resolve or escalate issues.
• Contributes to the creation of support documentation.
• Uses network security management software and tools to collect agreed security performance statistics.
• Carries out agreed system software maintenance tasks.
• Collect and review performance reports for various systems, report trends in security, risk, exposure, and overall performance to assist senior technical personnel to predict future issues or outages.
• Monitors compliance against agreed processes and investigates, assesses, and resolves incidents of noncompliance, escalating where necessary.

Benefits

• Assisting with storms or other Company emergencies is a part of all positions at Portland General Electric.
• PGE is an equal opportunity employer and is committed to fostering a workplace where employees feel connected, valued, and empowered to thrive.
• PGE will not discriminate against any employee or applicant for employment based on race, color, national origin, gender, gender identity, sexual orientation, age, religion, disability, protected veteran status, or other characteristics protected by law.
• PGE does not discriminate on the basis of disability. We recognize individuals have a variety of abilities to offer and we believe there is much to value and celebrate by incorporating different abilities into the work we do.
• One very important way we live this out is in our application and interview process. We work hard to support individuals who may need an accommodation to fully participate in these processes. If you feel you may need an accommodation, or would like to request one, please notify the Recruiter associated with the job posting. You may also make this request by contacting [email protected] or by calling 503-464-7250. The Recruiter will provide information and next steps for the accommodation process.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree