Cyber Security Architect-Physical

Evaluates existing and proposed technical architectures for security risk, provides technical advice to support the design and development of secure architectures and recommends security controls to mitigate those risks.

Evaluations of security architecture may include design assessment, risk assessment, and threat modeling.

Uses advanced-level skills to research, evaluate, track, and manage security threats and vulnerabilities in situations where in-depth analysis of ambiguous information is required

Position may be focused on specific areas including cloud security, applications security, physical security and identity and access management.

Primary Job Duties and Responsibilities 

Represent the office of the Chief Security Officer in evaluating technology initiatives and projects to determine security requirements and controls necessary to comply with company policies, standards, and industry best practices.

Participate in full solutions lifecycle including engaging with key business stakeholders to understand requirements, performing business analysis and relaying feedback to development partners to improve future offerings.

Evangelize security and application solutions and controls by creating and communicating presentations both internally and externally.

Develop in-depth security architectures, designs and standards.

Perform security risk assessments for proposed technology changes and recommend changes to existing controls and systems.

Engage with senior IT and business leaders and the CSO to address complex design considerations to appropriately manage risk on behalf of the company.

Align security solutions with industry security standards, frameworks and best practices.

Demonstrate flexibility and resilience in response to changing or ambiguous situations.

Stay current on industry trends and provider capabilities.

Support escalations from Security Operations Center Analyst team and assist in complex forensic and investigation activities as needed.

Maintain a strong understanding of the business to ensure adequate defense-in-depth design across the enterprise.

Perform any additional responsibilities as requested or assigned.

Bachelor’s degree in Computer Science, Information Technology or related field, or an equivalent combination of education and work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree.

Prior Job Experience Minimum of six years of experience in progressively responsible information technology roles.

5+ years of experience in developing, implementing, or architecting information systems

Knowledge, Skills and Abilities Knowledge in understanding various domains such as security architecture, system and network security, authentication and authorization protocols, cryptography, and application security.

Experience developing identity management, cloud and applications security strategies, architectures and implementation plans.

Experience with identity management systems and protocols.

Knowledge of current and emerging security technologies, threats, and techniques for exploiting security vulnerabilities.

Experience with data security and governance.

Experience in development and scripting languages (Java, Javascript/Typescript, Python, PHP). IP networking skills, UNIX shell scripting, PERL, BASH, Powershell or Python abilities, and the ability to manipulate and massage data preferred.

Project management skills: ability to prioritize and handle multiple tasks and projects concurrently.

Knowledge of technology terms, equipment, systems, functions and major vendors.

Advanced knowledge of security principles is desired through the achievement of advanced security certification such as CISM or CISSP.

Ability to obtain and maintain a government security clearance of Secret classification.

Disclaimer Employees must be able to perform the essential functions of the position, with or without an accommodation. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law.

MidAmerican Energy Company, a Midwest utility, provides regulated electric and natural gas service to more than 1.6 million customers in Illinois, Iowa, Nebraska and South Dakota. The company owns and operates a portfolio of power-generating assets, approximately 61% of which is wind generation.

MidAmerican Energy Company is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law. Employees must be able to perform the essential functions of the position, with or without an accommodation.