Sr IT Security Analyst

Job Description

Puget Sound Energy Cyber Defense Center is responsible for Cybersecurity Incident Response, security alerts and monitoring and threat intelligence. We protect the technology that keeps the lights on and gas flowing in the Puget Sound area as we support green initiatives to ensure we protect our planet for the future.

The Cyber Defense Center is dedicated to knowing what the bad guys are doing, making sure we investigate alerts and are prepared for a cybersecurity attack.

Job Responsibilities

• Analyzes application security needs based on the sensitivity or proprietary nature of the data, and ensures all systems are utilized for management-approved purposes only.
• Provides technical expertise and guides the administration of security tools that control and monitor information security.
• Researches, evaluates, designs, tests, recommends, and plans implementation of new or improved information security software or devices.
• Provides expert working knowledge of the day-to-day operating environment, available tools, operating techniques, and customer applications.
• Applies security, risk or compliance fundamentals, concepts and principles in at least one process area.
• Updates processes, procedures and policies as necessary.
• Provides advice and guidance regarding the implementation of security compliance controls.
• Determines causes of security and compliance violations and recommends corrective actions to ensure data security.
• Develops work plans and manages to the project schedule.
• May act as member of IT security incident response team.
• Proficiently applies IT methods, professional knowledge and PSE standards and practices to complex tasks and situations.
• Intuitively grasps familiar, stable system performance situations.
• Responds to unfamiliar, undefined, unexpected, or unstable situations with the professionally prescribed standard response.
• Uses standard analytical tools and rules to determine root cause and resolve the broad range of common system or application problems.
• Updates or creates documentation based on work performed.
• Works with IT professionals and managers, primarily within own segment.
• Effectively relates to business partners, professional peers, and other team members.
• Works with project manager to develop realistic work estimates, financial budgets and project schedules. Reviews project deliverables for accuracy.
• Coaches less experienced IT professionals.
• Estimates resource requirements for medium-sized, straight-forward projects.
• Oversees security compliance requirements and other IT audit responsibilities.
• Upholds the safety compliance standards inherent in PSE’s operating and/or field procedures related to work responsibilities. Promotes and supports a culture of total safety.
• Demonstrates commitment to conduct business honestly, ethically and consistent with our core values and Code of Conduct. Ensures duties are performed in accordance with all regulatory compliance obligations.
• Operates under general direction.
• Performs other duties as assigned.

Minimum Qualifications

• Bachelor’s degree and 5 years of experience in related field, or combination of specialized training or experience and five years of directly relevant experience.
• Technical proficiency in security-related hardware and software; ability to function as a consultant to other IT groups on security matters.
• Knowledge of security controls for servers and workstations.
• Understanding of various operating environments, e.g. UNIX, Windows, Linux, Cisco IOS, AIX, Cisco UCS, VMWare.
• Knowledge of working with network routers, LAN bridges, and the communication architectures which link them together.
• Understanding of security ‘firewall’ gateways and their designs, configuration and management.
• Knowledge of security and internal control frameworks such as: ISO 27001, NIST 800-53, COBIT and COSO.
• Experience with implementation and management of compliance requirements such as NERC and SOX.

Desired Qualifications

• Understanding and experience with security products and techniques such as token-based dialup authentication, modem callback and password management.
• Ability to effectively adapt to and apply rapidly changing technology to business needs.
• Knowledge and understanding of business needs, with the ability to establish and maintain a high level of customer trust and confidence.
• Proven ability to work under stress in emergencies; flexibility to handle pressure coming from all directions at one time.
• Strong analytical and problem-solving skills.
• Strong customer focus and ability to manage client expectations.
• Highly desirable are certifications in one or more of the following:
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Systems Security Professional (CISSP)
  • SANS-GIAC certifications family
  • Security Plus

Additional Information