Cyber Security Analyst

Carmel, IN

This position is responsible for providing proactive security monitoring and investigation of IT assets. This position will work to collect, analyze, and report on relevant cyber security event data creating actionable tasks. This role will work with a talented team of systems administrators, network engineers, and other IT staff to ensure the safety of our electronic assets consistent with established security policies, procedures, and requirements. Additionally, this position will play a critical role in incident response and vulnerability management. This position must adhere to, administer, and maintain ISSP, SOC 1, and NERC CIP compliant IT practices and procedures.

Duties and Responsibilities

• Research, implement, and manage tools, software, and processes that protect the network from malware, computer intrusion, theft of information, denial of service, data breaches, etc.
• Conduct monitoring and analysis of security events and alerts from internal systems and external sources to provide awareness of security events which may compromise confidentiality, integrity, and availability of critical systems.
• Review and configure dashboards, reports, and logs for anomalies and develop actionable tasks.
• Responsible for meeting deadlines and reporting obligations for scheduled compliance activities.
• Review, prioritize, and participate in ACES’ Vulnerability Lifecycle Management Program.
• Enhance overall security culture, producing and editing various content for security awareness training materials.
• Document, track, monitor, and resolve reported problems to ensure a timely resolution.
• Provide investigation, root cause analysis, and problem resolution.
• Make recommendations for new hardware, software, and services to meet corporate and departmental goals.
• Participate in business continuity exercises as requested and maintains system readiness for business continuity.
• Provide 24 hours a day / 7 days a week on-call support on a rotating basis with other team members.
• Ability to travel.
• Adhere to and support all ACES corporate policies and comply with all regulatory requirements including but not limited to NERC, FERC and relevant state regulations as applicable to the position.
• Any additional responsibilities assigned by management.

Required Qualifications

• Bachelor of Science in Computer Science, Technology, related degree or equivalent experience preferred
• Previous cyber experience is a plus
• Understanding of technology and business requirements and ability to translate into actionable security tasks
• Automation and scripting experience preferred
• Information system architecture and physical and electronic security controls experience, including:
  • IPS/IDS/Threat Hunting
  • Vulnerability and Patch Management
  • Incident Response
  • Encryption
  • Identify and Access Management and Multifactor Authentication
  • Security Information and Event Management (SIEM)
  • Configuration Change Management
  • Firewalls
  • Business Continuity and Disaster Recovery Planning
  • Operating Systems (including Windows, Linux, Unix)
  • Remote Access Systems
  • Email spam filter management
• Ability to develop and execute short-term plans
• Understanding of NERC CIP standards
• Effective written communication, oral communication, and presentation skills
• Strong organization skills and technical writing skills
• Strong attention to detail and exceptional customer service skills
• Ability to troubleshoot issues and resolve problems quickly
• Working knowledge of ACES fundamental operations
• Ability to maintain confidentiality
• Works independently with minimal supervision