Supervisor Threat Hunting - Cyber Security & TSOC - Wadsworth Sys Control Center

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger.

FirstEnergy (NYSE: FE) is dedicated to integrity, safety, reliability and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,000 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of more than 3,500 megawatts.

About the Opportunity

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]

This position’s base reporting location is in Wadsworth Township, Ohio, and reports to the Manager of Transmission Security Operations Center (TSOC) Operations.

The Supv, Threat Hunting is responsible for day-to-day operations and will lead a team of threat hunters in identifying, analyzing, and mitigating cyber threats. They will be responsible for developing and implementing threat hunting and emulation strategies, overseeing daily operations, and advising IT and Cyber leadership on how to mitigate emerging threats. This role provides thought leadership and support across all security teams to improve the security posture of FirstEnergy overall.  The Supv, Threat Hunting also measures effectiveness and security metrics to report up to all levels of leadership, as well as maintain open communications with peers in Cyber Security, Security Technologies and TSOC teams.

Responsibilities

• Oversees a portfolio of Threat Intelligence, threat emulation and associated platforms/tools that are essential to critical security processes. 
• Ensure security tools are resilient, redundant, secure and can scale for growth to support
• Partner with the Manager, TSOC Operations and Supv, TSOC to ensure continued operations of 24x7 monitoring.
• Research, evaluate, design, engineer, and proof-of-concept both commercial and Open-Source tools
• Educating and influencing IT, Cyber Security and Business stakeholders to better understand existing security risks, best practices, and infrastructure designs/changes required to support business and IT strategies securely.
• Manage a team of threat hunters who act as a cybersecurity subject matter experts (SME) to support the TSOC, providing consultancy and advice on the delivery of security solutions.
• Re-evaluate current controls and make recommendations for  best practices based on new information received in an ever evolving threat landscape.
• Drive technology strategy and enterprise architecture for TSOC Operations. 
• Developing, documenting, and recommending plans for investing in IT security, including cost trade-offs and cost reduction opportunities. Identify gaps in controls or visibility to assist in driving future strategy.
• Developing and presenting business cases and security architecture plans to management.
• Identify process improvements to further advance security operations.
• Make recommendations for use of new technologies to support cyber security activities.
• Assist to provide investigation services and coordinate mitigation efforts during an incident.
• Build and maintain relationships with key business unit areas within Cyber, IT, Transmission, and Corporate Security
• Research and maintain knowledge of current technologies, best practices, and ethical artificial intelligence practices. 
• Participate with cross-functional team members in issue identification, process impacts and solution development for cybersecurity projects and initiatives. 
• Must be comfortable in delivering messages across a wide spectrum of individuals having varying degrees of technical understanding.
• Assist with incident response for operational and cybersecurity related issues. 
• Maintains a high-level of technical knowledge of platforms supported by attending webinars, conferences, and workshops; reviewing professional publications and research; and establishing personal networks.
• Provide input to contract negotiations for required software, hardware, and consulting.
• Responsible for supporting and maintaining compliance with various NERC CIP standards to protect the BES for FirstEnergy
• Mentor and motivate a distributed team that scales and evolves with security and technology needs.
• Responsible for managing staff performance by setting objectives, tracking performance, and providing feedback.  Assists in the personal growth of staff through individual development plans, mentoring, coaching and stretch job assignments.
• Champions FE’s Core Values & Behaviors, through coaching and by personal example.
• Accomplish annual SOC and company performanc