Sr. Cyber Security Analyst - Threat Intelligence - Bethpage, NY

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.

PSEG Company:  PSEG Long Island
Salary Range: $ 107,600 - $ 170,300
Work Location Category: Hybrid

• Hybrid: A blend of remote and onsite work, with at least three onsite days per week required.

PSEG is not offering visa sponsorship for this position.

Job Summary:
This position is an experienced, senior level, hands-on technical lead, performing cyber security incident response functions and maintaining systems, while providing technical guidance to the team. Reporting to the Security Ops and Incident Response lead. The Incident Response and threat intelligence specialist will be responsible for incident response and proactive cyber threat hunting. This role will be responsible to conduct in-depth investigations, contextualize incidents with PSEG Long Island-internal information, and drive containment and response actions with PSEG IT teams. Will provide technical leadership and direction during the duration of a security incident, leveraging all available detection and response tool suites within PSEG, including SIEM, EDR/XDR, email security, DNS filtering, and network security appliances, to analyze malicious artifacts and assist with forensic investigations.

Job Responsibilities:

• Responds to and remediates email, endpoint, threat intelligence, and network-based threats; provides forensic investigation and support
• Provides after-hours support as needed for response activities
• Collaborates with cross divisional and Cybersecurity teams to continuously improve security capabilities and response to threats in the most efficient and effective manner
• Assists with projects to implement advanced technologies to prevent & identify malicious behavior within cloud environments, networks, endpoints, and email technologies
• Operates products such as SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR, cloud security products, IDS/IPS, , and other security technologies
• Implements and performs threat analysis utilizing industry standard frameworks (kill chain/diamond model) and techniques
• Proposes and helps review security plans and policies to improve environmental security
• Maintains and produces metrics, operational playbooks, process diagrams and documentation for the Cybersecurity program
• Produces and distributes operational and tactical threat intelligence reports
• Other duties may be assigned as needed to address new security threats facing the enterprise
• Assists in the investigation and resolution of security events and incidents.
• Perform security event correlation, triage, and analysis
• Apply security Threat Intelligence while responding to and investigating security events or Incidents
• Develop Self and/or Others: Planning and supporting the development of knowledge, skills, and abilities to fulfil current or future job responsibilities more effectively
• Champion Change: Actively engaging and supporting change and innovation by communicating the future- state, trying new approaches, and collaborating with others to make the change successful
• Build Relationships: Building, leveraging, and maintaining relationships within and across work groups.
• Leads and manages information security technologies
• Provides technical expertise in threat/risk assessments
• Defines, designs, and implements strategies to protect against emerging threats using security tools
• Responds to security incidents
• Performs security reviews on new technologies and changes to existing technologies.

Job Specific Qualifications:

Required:

• Bachelor’s degree and 6+ years of cybersecurity experience, or 10+ years without a degree.
• Experience with security technologies including SIEM, IDS/IPS, EDR, DLP, encryption, antivirus, proxies, and network access control.
• Strong incident response, threat analysis, and SIEM experience.
• Experience developing and implementing incident response processes and procedures.
• Ability to assess cyber threats, vulnerabilities, and attack vectors.
• Broad knowledge of Windows, network security, operating systems, communications networks, and security tools.
• Experience with firewalls, vulnerability management, identity and access management, malware protection, and security event analysis.
• Knowledge of cloud security and protecting cloud environments.
• Experience designing automated security response workflows.
• Ability to work independently and collaboratively in a team environment.
• Strong relationship-building skills with IT, management, and business stakeholders.
• Ability to translate technical concepts into business terms.
• Experience leading and coordinating cyber incident response activities.
• Strong written and verbal communication skills with technical and non-technical audiences.

Some positions at PSEG require access to information covered by the Department of Energy’s regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a “Generally Authorized” destination on the attached list and not also a citizen, national, permanent resident of any country not listed; OR (4) a “Protected Individual” under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)).
 

Preferred Qualifications:

• Security certifications such as CISSP, GIAC/SANS, or equivalent.

Preferred Qualifications:

• Security certifications such as CISSP, GIAC/SANS, or equivalent.