Cyber Security Analyst Progression

Title: Cyber Security Analyst Progression 
Company: Tampa Electric Company 
State and City: Florida - North Ruskin
Shift: 8 Hr. X 5 Days

 

 

Cyber Security Analyst Progression

 

Cyber Security Analyst – Level 1:

 

POSITION CONCEPT: 
The Cyber Security Analyst  – Operational Technology (OT)  is responsible for maintaining the security and integrity of operational technology systems through routine cybersecurity maintenance activities. Manages and continuously improves the asset inventory database to ensure accurate visibility and tracking of the operational technology. Supports the development and implementation of the organization’s OT Cybersecurity program and framework, aligning activities with industry standards and regulatory requirements. Collaboration with cross-functional teams ensures consistent application of security controls and continuous improvement of cybersecurity posture.

 

Cyber Security Analyst Sr – Level 2:

POSITION CONCEPT: 
The Cyber Security Analyst Sr is responsible for addressing Operation Technology (OT) vulnerabilities by taking the appropriate corrective action or following the appropriate escalation procedures, assessing threat landscape, confirming for secure configuration of Tampa Electric’s OT assets, identifying vulnerabilities applicable to the OT components and developing the remediation plans. Develop cybersecurity maintenance procedures and enforce OT cybersecurity framework and standards, evaluate IT related needs of OT environment and team members, and identify cybersecurity awareness gaps. Evaluate OT cyber assets and assign criticality rating to cyber assets and develop remediation plan for gaps in compliance of the systems with the OT cybersecurity program. Has increased responsibilities in security intelligence monitoring, incident response, and development of cybersecurity maintenance procedures. May serve as a project lead and mentor Cyber Security Analyst. Works under general supervision.

 

Cyber Security Analyst Lead – Level 3:

POSITION CONCEPT: 
The Cyber Security Analyst Lead is responsible for maintaining and improving OT cybersecurity framework and standards, reviewing cybersecurity maintenance procedures and threat landscape assessment, implementing vulnerability management technologies and vulnerability remediation plans. Lead will facilitate asset criticality evaluation process, maintain cybersecurity maintenance schedule, and train staff. Lead will maintain and improve the OT cybersecurity program, ensuring its alignment with the latest industry standards (NERC, NIST), build cross departmental ITOT collaboration, educate team members the latest cybersecurity industry trends.  Has increased responsibilities in evaluating industry standards and adopting them into cybersecurity controls. May serve as a project lead and mentor to other department team members.

 

Level 1:

 

DUTIES AND RESPONSIBILITIES:
Identifies cybers assets, examines and extracts asset configuration, updates the OT cyber asset database to protect operational technology.
Installs security patches, updates antivirus definitions, and creates system backups. Collects, maintains, updates baselines of the operational  systems, updates cybersecurity SharePoint site for stakeholder engagement. 
Reviews the releases of new CVEs from external sources for applicability to operational  assets regularly. 
Assists OT team l with IT-related work: software and hardware of HMIs and network appliances, remote connectivity. 

 

Level 2:

 

DUTIES AND RESPONSIBILITIES:
Evaluates network architecture, system configuration, and external connection layout to ensure compliance of operational technology systems with cybersecurity program. 
Reviews vendor manuals, training materials, industry standards, and develops cybersecurity maintenance procedures. 
Provides activities planning guidance, feedback on work completed, and training to Cybersecurity Analysts. 
Evaluates new CVEs for applicability to OT cyber assets. 

 

Level 3:

 

DUTIES AND RESPONSIBILITIES:
Translate all applicable standards (NERC CIP, NIST CSF, NIST 800-53, etc.) into appropriate systemic and procedural solutions.  
Review, revise, and update Energy Supply’s operational technology cybersecurity standards and procedures. 
Evaluate the Energy Supply’s operational technology  systems and coordinate necessary actions to maintain compliance with applicable internal and regulatory standards.  
Develop management r