Become a Cybersecurity Intelligence Specialist and help strengthen our proactive defense capabilities. In this role, you'll support the Cyber Threat Hunt and Intelligence team by researching, analyzing, and disseminating threat intelligence that enables informed decision-making and targeted cybersecurity response. You'll work across a wide range of cyber intelligence toolsets to monitor, assess, and escalate critical threat insights aligned to Priority Intelligence Requirements (PIRs). Your contributions will directly enhance threat detection, situational awareness, and strategic planning efforts across the Cybersecurity Operations Center (CSOC). You'll collaborate closely with incident response, threat hunt, and detection teams, integrating intelligence into daily operations and helping evolve our threat-informed defense strategy.
In this role, you will:
- Monitor, research, and evaluate open-source, commercial, and government threat intelligence feeds to identify emerging cyber threats, trends, and threat actor activity.
- Develop and enrich threat indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) within the threat intelligence platform, maintaining up-to-date contextual relationships.
- Action alerts within cyber intelligence toolsets and evaluate their relevance, severity, and potential impact to organizational assets.
- Collaborate with the CSOC team to provide relevant context for alerts, contribute to threat hunts, and support intelligence-driven investigations.
- Produce and deliver timely and actionable intelligence reporting tailored to operational, tactical, and strategic audiences.
- Support the continuous improvement of intelligence processes, documentation, and integration into CSOC workflows.
- Contribute to daily stand-ups and cross-functional collaboration efforts to ensure intelligence activities remain aligned with CSOC priorities and evolving threat landscapes.
As a Cybersecurity Intelligence Specialist, your work will help power our planet, reduce carbon emissions, and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?
Responsibilities- Investigates and responds to security alerts including on-call rotation
- Supports the development, design, logistics, and facilitation of internal and external cybersecurity exercises
- Steers the analysis of network traffic and system data to identify anomalous activity and potential threats to resources
- Delivers cyber incident triage including identifying the specific vulnerability and making recommendations which enable expeditious remediation
- Conducts vulnerability research activities, gathers information on new and emerging threats and vulnerabilities
- Reports on and suggests solutions for damage to the data and infrastructure as a result of cyber incidents
- Supports the strategic development of Cyber Security Programs ensuring alignment with the cyber security strategy and develops and improves cyber security procedures owned by the team
- Manages cyber incident trend analysis and reporting
- Creates and maintains high quality documentation related to IT processes including flow charts and data flow diagrams
- Maintains the cybersecurity post-incident after action tracking process
- A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.
Minimum Qualifications
- Three or more years of experience in information technology, information security and/or cybersecurity.
- US Citizenship Required.
Preferred Qualifications
- Bachelor's degree in specialized field or an equivalent combination of education, training, and experience.
- Certifications: CISSP, GISF, GSEC, GCTI.
- Strong written and verbal communications skills.
- Experience leading and collaborating with cross-functional teams.
- Ability to think critically and maintain thorough and comprehensive documentation.
- Experience working in a Security Operation Center, Incident Response or Intelligence team.
- Comfortable working in multiple, diverse IT environments and eco-systems.
Southern California Edison
P.O. Box 800
Rosemead
California États-Unis
www.sce.com
