Cyber Security Analyst II - Portland, OR - #105298
PacifiCorp is seeking customer-centric candidates to grow and sustain our commitment to a culture of customer service excellence, environmental sustainability and diversity, equity and inclusion.
General Purpose
Under limited supervision, performs operational activities including event monitoring, evaluation, and response to security events. Respond to real-time security incidents and supports activities for response, containment, and event forensics.
Responsibilities
- Effectively monitor the Security Information and Event Management system (SIEM). Respond to alarms and other indications of cybersecurity incidents. Determine whether malicious activity has occurred, then evaluate, contain, eradicate, and report. (30%)
- Evaluate events for potential security concerns until a determination is made of false positive or root cause can be determined. Refine and tune the existing automated alerts to improve performance (20%)
- Process 3rd party (including government) alerts regarding new patterns of malicious activity, examine current and historical data for pattern matches. (5%)
- Support compliance requirements including CIPS, including the documentation of monitoring and review activities related to CIPS assets and any other compliance obligations as needed. (15%)
- Provide timely and accurate cross-platform incident response support. (10%)
- Assist in development and maintenance of Global Security Operations Center documentation to support monitoring and response functions. (10%)
- Perform any additional responsibilities as requested or assigned. (10%)
Requirements
- Bachelor s degree in Computer Science, Information Technology, or related field; or equivalent work experience. (Typically six years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a Bachelor s degree.)
- Three years' experience in Security Information Management or related field.
- Three years of hands on experience with information security technologies such as IDS/IPS, WAF, SIEM, honeypots, malware analysis, red or blue team engagements.
- Two years of hands on experience with a production Security Information and Event Management system (Qradar, Splunk, Loglogic, etc.) and associated incident response experience.
- Knowledge of security principles is desired through achievement and active pursuit of advanced security certification including CISM or CISSP or equivalent.
- Exposure to programming and scripting languages such as PERL, Python, Go, and Powershell, as well as open source security tools such as Syslog-NG, SNORT, Cuckoo, etc.
- Ability to construct and execute database queries using SQL.
- Technical knowledge of Microsoft Windows and Linux operating systems, databases (Oracle/SQL), Cisco network gear, and at least one major firewall.
- Technical knowledge of TCP/IP, proxies, and web application firewalls.
- Experience with vulnerability management tools and concepts (CVSS, Nexpose, Nessus, etc.)
- General knowledge of information technology terms, equipment, systems, functions, and major vendors Information Technology work experience strongly preferred. (Server, endpoint, software development, application support, network, etc.)
- Effective interpersonal skills and customer relationship skills.
- Effective analytical, problem-solving and decision-making skills.
- Project management skills; ability to prioritize and handle multiple tasks and projects concurrently.
Additional Information
Req Id:
105298
Company Code:
PacifiCorp
Primary Location:
PORTLAND
Department:
PacifiCorp Corporate
Schedule:
Full Time
Personnel Subarea:
Exempt
Hiring Range:
81,800 - 96,200
Employees must be able to perform the essential functions of the position with or without an accommodation.
At PacifiCorp, we encourage everyone to work together. We embrace diversity and value the distinct perspectives of all our employees. We strive to cultivate a workplace that connects each employee to the organization and enables all individuals to participate and contribute to their full potential.
It is PacifiCorp's policy to provide and promote equal employment opportunity to all employees and applicants in accordance with local, state and federal laws and regulations governing personnel activities. In accordance with federal guidelines, PacifiCorp is committed to a program of affirmative action. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, veteran status, national origin, sexual orientation or gender identity.
All offers of employment are contingent upon the successful completion of a background check and drug screening
|
|
 | |
