Cybersecurity Specialist 3 or 4
NW NaturalAbout the role
Cybersecurity Specialist 3 or 4
Non-Union Position
IS Security & Analytics Staff 1; Portland, Oregon (US-OR)
Hybrid schedule available for Oregon & Washington residents.
Regular FT, Exempt
Posting # 5561
About Us:
At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry.
In addition to environmental stewardship, we’re also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility.
NOTE:
Employees based at our Headquarters are required to work on-site a minimum of two days per week. Specific in‑office days may vary by team and business needs. This hybrid schedule supports collaboration, connection, and engagement while also offering flexibility for remote work.
The Role:
You’ll be a member of the Security Operations Team and collaborate with our team on projects and operational work, as part of our security program to meet Transportation Security Administration Security Directives. This a key role in a technology organization maturing its processes and modernizing its technology and you will work closely with Network, Cloud, and other technical teams.
The primary purpose of this position is to ensure Information Technology & Services (IT&S) Department is compliant with state and federal regulations by identifying, evaluating, prioritizing, monitoring, and reporting on the effectiveness of operational controls within Information Technology (IT) and Operational Technology (OT) environments. Your responsibilities would include people, process, and technology.
This position will be based at our office in downtown Portland, OR.
Day to Day:
Security Consulting
- Research, evaluate, design, test, recommend, plan, implement, and administer new or updated security technologies.
- Collaborate on projects with staff and vendors to ensure that security issues are addressed throughout the project lifecycle.
- Review system designs and identify areas for security improvements, including cloud and network systems.
- Provide ad hoc consulting on tactical security topics.
- Develop and revise cybersecurity policies and standards.
Connectivity and Automation Focus
- Serve as the lead integration specialist for Security Information and Event Management (SIEM) log collection
- Administer email and Domain Name System (DNS) security tools.
- Develop automation for security integrations, detections, and responses.
- SAP familiarity is a bonus.
Security Monitoring and Incident Response
- Review alerts from security monitoring tools.
- Respond to security incidents, including leading the response for smaller incidents.
- Apply NW Natural context to potential incidents to better understand them.
- Liaise between incident response leads and subject matter experts.
- Research and assess new threats and vulnerabilities.
- While the security monitoring and incident response responsibilities mean that there is an after-hours component to this role, typically it is less than one hour per week.
General
- Evaluate security risks and their impact to NW Natural.
- Create technical documentation for other analysts and teams.
- Present technical solutions or recommendations to peers and leadership and provide updates on technical issues.
- Level 3: Provide training to less experienced team members and colleagues
- Level 4: Mentor less experienced team members and colleagues
Come on your first day with:
- Minimum five years of information security experience required for Level 3. Minimum eight years of experience in information security with focus on advanced skills and complex designs required for Level 4.
- Bachelor’s degree in information security, related industry certifications, or equivalent combina
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s