Description
Job Summary
*There is one vacancy which will be filled at the level commensurate with the successful candidate's education, experience, knowledge, skills and abilities.
This role is to execute cyber security initiatives in accordance with the Electric Transmission Field Operations (ETFO) Cyber Compliance Monitoring Program. This position will focus on day to day monitoring and surveillance of Electric Transmission's ICS/OT assets and networks. This role will need to report to the office and is not eligible for hybrid or remote work. This role is eligible to work a weekly schedule of four 10hr or compressed 9hr days.
- Responsible for developing, supporting, and maintaining awareness of the Industrial Controls System (ICS) and the Operational Technology (OT) systems associated with regulatory requirements, industry trends, and potential impacts to ETFO's Cyber Compliance Monitoring Program.
- Support the installation and maintenance of ICS/OT monitoring equipment and protective relay equipment, SCADA, network and security equipment in Power Delivery systems.
- Utilize cyber security systems deployed in protection of ICS/DCS assets, including asset inventory systems, change management, patch management, file integrity, anti-virus, whitelisting, and firewall rule request applications.
- Perform compliance and troubleshooting activities (ESNET, Power System Center).
- Coordinate patch management and cyber asset management activities.
- Develop and revise baseline configuration documentation as needed per NERC CIP requirements.
- Analyze potential cyber security incidents, security alerts and perform security assessments under the direction of team leads and management.
- Participate in annual cyber security incident response exercises.
- Coordinate with IT for firewall rule change requests and network equipment implementation on the ICS/OT network as needed.
- Coordinate with substation engineering, field personnel, and operation centers to complete scheduled cyber compliance monitoring activities as needed.
- Schedule maintenance activities using the outage application.
- Develop and track mitigation plans for updates that will not be implemented in accordance with NERC Patch Implementation requirements.
- The company is actively seeking United States military veterans and service members who meet the qualifications outlined below
Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined (above / below)
Required Knowledge, Skills, Abilities & Experience
Associate ET P&C System Field Compl Analyst:
- 1-2 years of experience in Information Technology/Operations Technology (IT/OT), cyber security, firewall rule development, and management of Windows operating systems security or a combination of this experience and ICS experience. (Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)
- Must have a general hands on' understanding of cyber security processes and technologies including malware prevention.
- Must be able to perform assignments designed to develop knowledge, skills and abilities requiring application of policies, procedures, techniques and other criteria in executing all aspects of the job.
- Must be able to perform routine work assignments, but over time demonstrate the ability to perform more complex assignments.
- Must be able to work under established policies and procedures to meet set deadlines and program requirements.
- Must be able to develop a good understanding of NERC CIP standards and requirements.
- Must be able to develop a good understanding of ETFO Cyber Security program and its application.
- Must be able to develop an understanding of substation awareness including a working knowledge of substation design, architecture, physical security measures, electronic security measures, and safety best practices.
- Must have the ability to adapt to rapidly changing technology and regulatory requirements to meet business needs.
- Competency in verbal and written communication skills.
(Mid-Level) ET P&C System Field Compl Analyst:
- At least 4+ years of experience in Information Technology/Operations Technology (IT/OT), cyber security, firewall rule development, and management of Windows operating systems security - or - 4 years of a combination of this experience and ICS/OT experience. (Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications)
- Must have a general hands on' understanding of cyber security processes and technologies, malware prevention.
- Must have some experience with security technologies including; firewalls, logging and monitoring tools, antivirus tools, malware prevention, incident response and recovery tools, asset inventory systems.
- Must have a good understanding of NERC CIP standards and requirements.
- Must have a good understanding of ETFO Cyber Security program and its application.
- Must have an understanding of ICS/OT networks while applying cyber security controls.
- Must have an understanding of automated and manual patch management systems.
- Experience in security aspects of multiple platforms, operating systems, software, communications, and ICS/OT network architecture.
- Must have an understanding of vulnerability assessment tools (i.e. NMAP, NESSUS, and Wireshark).
- Must have an understanding of multiple Substation Communication architectures and Relay protection platforms.
- Must have an understanding of substation awareness including a working knowledge of substation design, architecture, physical security measures, electronic security measures, and safety best practices.
- Must have the ability to adapt to rapidly changing technology and regulatory requirements to meet business needs.
- Strong level of commitment to meeting compliance deadlines.
- Excellent analytical and problem solving skills. Ability to work independently and in a team environment to identify errors and implement solutions with under the direction of senior team members. Demonstrated leadership and interpersonal skills.
- Competency in verbal and written communication skills.
Education Requirements
Preferred Associate Degree (or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education)
*This role will accept upcoming graduates no later than December 31st, 2024.
Disciplines Preferred:
- Cyber Security
- Computer Science
- Electrical Engineering
- Engineering Technology
- Information Technology
Contact
Dominion Energy
120 Tredegar St
Richmond
Virginia United States
www.DominionEnergy.com
From the same organization
