Cyber Security Analyst, Security Operations, Progression

Title: Cyber Security Analyst, Security Operations, Progression 
Company: Tampa Electric Company
Location: Bearss Operations Center 
State and City: Florida  -  LUTZ
Shift: 8 Hr. X 5 Days

Hiring Manager:  Marc Imhof

Recruiter: Mark Koener 

 

 

 TITLE:                Cyber Security Specialist Progression
PERFORMANCE COACH:     Lead Cyber Security Architect
COMPANY:                Tampa Electric
DEPARTMENT:            Information Security
 

POSITION CONCEPT
The Cyber Security Specialist Associate is responsible for assisting with monitoring the company’s information security systems, ensuring that all procedures are followed on a daily, weekly, monthly, and annual basis.  Provide support, within a team environment, for systems used to monitor and protect the enterprise assets.  Detect, analyze, and respond to any suspicious cyber security activity across TECO/Emera business and operational networks, including all network infrastructure, operating systems, and server platforms throughout TECO Energy and its subsidiaries.  Develop an in-depth understanding of exploits (e.g., malware) and vulnerabilities, resolving issues by taking the appropriate corrective action, or following the appropriate escalation procedures.  Assist with identifying and assessing threats to TECO’s network and data, monitoring TECO’s network for malicious activity, investigating intrusions and other relevant events, and has a maintaining a sophisticated and detailed understanding of the evolving threat landscape, includes assessing enterprise assets to include critical assets for secure configurations and maintaining and enforcing regulations regarding NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), PCI, and corporate information security standards.

Advancement to a higher level is based on value added to the company through increased duties, responsibilities, and accomplishments.  Advancement is not automatic, i.e. based solely on time in the job, but will be based on direct observation of the employee’s performance, accomplishments, qualifications, and the business and/or technical needs of the department.

 

PRIMARY DUTIES AND RESPONSIBILITIES
1.    Translate all applicable standards and requirements (NERC CIP, NIST 800-171, NIST 800-53, PCI-DSS, SOX, etc.) into appropriate systemic and procedural solutions to enable compliance adherence.  Coordinate and communicate necessary actions to maintain compliance with applicable internal and regulatory standards.  Assist in the development and enforcement of company policies, procedures, desk level procedures, disaster recovery plans, processes, plans and standards that support and facilitate governmental and regulatory compliance.  Assist in developing management responses to internal/external government and regulatory audits and data requests with respective management and staff. 20%
2.    Evaluate the effectiveness of in-place security controls to constantly strengthen the overall security posture.  Recommend implementation of countermeasures or mitigating controls and contribute to design, implement, and maintain security tools, systems, and technologies leveraged by the CFC (Cyber Fusion Center), TSA, or NERC CIP program. 20%

3.    Monitor and respond to security threats and/or events generated by various security monitoring tools/technologies for the enterprise network.  Determine if anomalies are actual system compromises.  Escalate significant threats/events to 2nd or 3rd tier support for deeper analysis.  Ensure all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment. 15%
4.    Conduct digital forensics by collecting computer/network-related evidence in support of policy violations, criminal activity, fraud, and in response to threat intelligence, law enforcement investigations, or information technology (IT) audit efforts (NERC CIP, SOX, PCI, etc.).  Conducts malware analysis to gather relevant indicators of compromise (IOCs) for active hunting and continuous monitoring for installed toolsets. 15%
5.    Monitor external event sources for security intelligence and actionable incidents. 15%
6.    Develop and maintain threat/risk metrics, security processes, and desk level procedures. 15%

 

SUPERVISION
Direct Supervision:         None
Indirect Supervision:         None

 

RELATIONSHIPS
Key Internal:     Engaging multiple IT groups and business units, including Energy Supply, Energy Delivery, and Regulatory Affairs.  Interactive engagement will require communication with individual contributors, middle management, and executive management.

Key External:         Engaging externa