Analyst PG Op Technology Security 2

Pay Grade

14

**Qualifications may warrant placement in a different job level**

Position Summary

Power Generation Cyber Security Analyst (PGCSA) ensures the integrity and availability of Industrial Control Systems (ICS) throughout the Power Generation fleet. PGCSA develops and implements secure ICS architectures to enable effective cyber security controls, monitoring capabilities and Operational reliability. 
Tasks include but are not limited to the following: ICS Architecture design, Cyber Security and Risk Management, Communications and Network Security, Security Assessment and Testing, Maintain Cyber Security Programs, Subject Matter Expert for applicable regulatory obligations/audits.
PGCSA is expert in the various ICS architectures and Cyber Security of deployed generation. PGCSA designs and implements changes to respective Power Generation ICS landscapes ensuring Cyber Security from field devices to Control Room. PGCSA evaluates new and emerging technology associated with ICS deployments for security flaws and develops risk informed mitigations. PGCSA follows and interprets regulatory language in order to incorporate corresponding controls to support changes in the regulatory landscape.
 

Tasks and Responsibilities

• Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.
• Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
• Analyze candidate architectures, allocate security services, and select security mechanisms.
• Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
• Integrate results regarding the identification of gaps in security architecture.
• Document how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Determine the protection needs (i.e., security controls) for the ICS(s) and network(s) and document appropriately.
• Perform system administration on specialized ICS applications and systems to include installation, configuration, maintenance, backup, and restoration.
• Create, edit, and manage network access control lists on specialized cyber defense systems (e.g., firewalls and intrusion prevention systems).
• Analyze Power Generation's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives.
• Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM]).
• Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Ensure that the application of security patches for commercial products integrated into system design meet the timelines dictated by the management authority for the intended operational environment.
• Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
• Implement specific cybersecurity countermeasures for systems and/or applications.
• Integrate automated capabilities for updating or patching system software where practical and develop processes and procedures for manual updating and patching of system software based on current and projected patch