Cyber Security Analyst II

CEI is a technology partner providing technology, digital experience, and staffing solutions. The Cyber Security Analyst II will support a client’s Cyber Security Program by monitoring patch management, maintaining NERC CIP compliance, developing security baselines, supporting vulnerability assessments, and protecting critical cyber assets.

Responsibilities:

• Maintain and support the Cyber Security Program, protecting all corporate cyber assets
• Infrequent overnight business travel to locations throughout the our client's service territory (OH, PA, NJ, MD, WV) will be required of this position
• Travel around Akron area as needed
• Support compliance with NERC CIP, protecting the Bulk Electric System
• In conjunction with the team and other stakeholders, develop and maintain security baselines, procedures, and other strategies that effectively protect cyber assets while ensuring reliable and consistent system operations
• Consult with Business Units and IT on security and protection measures of systems and information during the design and implementation of an on-premise and cloud/SaaS solutions
• Participate in the Cyber Incident Response process
• Aid in the development and maintenance of the Security Awareness Training program
• Understand software and system vulnerability processes, manage vulnerability patches through a process lifecycle, and perform vulnerability assessments on systems and services
• Support the implementation of Corporate Cyber Security capital projects by assisting with the implementation of devices; evaluating vendor solutions; assisting with coordination of vulnerability assessment activities; assisting with review of programs, policies, procedures and standards in relation to cyber security best practices

Requirements:

• 4+ years of professional work experience in cyber or information security, or in another IT discipline where cyber or information security was a significant portion of the position's responsibility
• Effective communication skills which includes creating and delivering presentations, briefs, and training sessions
• Must compose well-written, professional documents and reports with minimal editorial and proofing support
• Translate technical output from systems and assessment tools into understandable reports and action plans
• Work effectively with people at varying levels within an organizational hierarchy to accomplish tasks and goals
• Work independently within a set of objectives, procedures, and parameters to accomplish project tasking
• Able to lead ad-hoc project task teams and other workgroups to accomplish project tasks, resolve issues, and lead/communicate important changes
• Able to participate in an on-call rotation (cycling weekly) responding to out-of-hours calls and alerts in support of security response, including infrequent on-site response out-of-hours
• Bachelor's Degree in Computer Science, Information Security, or similar discipline is preferred
• A bachelor's degree in another field with relevant industry experience in cyber/information security will be considered
• Experience in hands-on operation and administration of one or more standard IT discipline areas (Windows, Linux/Unix, Networking, etc.) in a professional setting is preferred
• Holding a security-related certification such as a CISSP, GIAC GSEC, etc., is preferred
• Bachelor's degree preferred
• Security-related certifications such as CISSP, GIAC GSEC, etc