Cybersecurity Engineer

Notice to recruiters: Platte River Power Authority does not accept unsolicited resumes from headhunters, recruitment agencies or fee-based placement services. No agency emails, calls, or solicitations to staff are accepted without a valid agreement. Any unsolicited resume submitted to staff will be considered property of Platte River Power Authority and with no obligation to pay any referral fees.

Job summary

Implements and supports enterprise security architecture and oversight for development, configuration, implementation, and maintenance of information and cybersecurity products, policies, procedures, programs, standards, and controls. Serves as a subject matter expert with security issues, best practices in cybersecurity, and technical processes.

This posting will close no later than February 26.

Work environment and schedule

This position works a typical workweek schedule (Monday through Thursday or Monday through Friday) in a general office environment and may be eligible for hybrid workdays. The successful candidate should reside within a commutable distance of Fort Collins. Performing this work requires occasional physical effort to lift and carry light objects and is primarily sedentary; minimal walking or standing is required on an as-needed basis.

Essential duties and responsibilities

- Implements and supports enterprise security architecture and oversight under the direction and leadership of the department team lead.

- Assists in the development, configuration, implementation and maintenance of information security products, policies, programs, standards, procedures, runbooks and controls.

- Responsible for cybersecurity education and awareness program, which includes creating content for monthly awareness communication and training.

- Promotes security using the organization’s cybersecurity framework.

- Supports and monitors information security systems to meet goals of the Cyber Risk Remediation Program and engages in appropriate best practices; regularly reviews and updates risk remediation program documents.

- Performs vendor risk and security assessments for new hardware, software, and cloud services as well as contract renewals for existing technology vendors.

- Serves as a technical resource and team member in security integrity, research methods, and best practices for internal and external vulnerability assessments and penetration tests.

- Identifies security enhancement opportunities and the implementation of solutions.

- Supports proactive and reactive security investigation methods and effective incident response programs and participates in tabletop exercises.

- Performs information gathering, including log collection, correlation, reviews, archival, retention and monitoring of automated alerts for items such as change detection alerts, rogue wireless network alerts, security system health alerts, exploit attempt alerts and unauthorized account changes; continuously tune the system with the senior team lead to remove false positives and add new use cases and detections

- Monitors communication channels such as alerts and vendor bulletins for security vulnerabilities and security patches.

- Works closely with others and provides support and guidance, including support of the technology and physical security teams in adherence to security best practices.

- Supports technology with the development and implementation of disaster recovery and business continuity plans.

- Performs related administrative, documentation and other duties that support security applications, tools, programs, and reporting.

- Maintains professional memberships with various Information Sharing and Analysis Centers and other industry groups, notify others on team when relevant, remains updated with the security landscape and regularly attend cybersecurity training.

- Performs other duties as assigned

Knowledge, skills, and abilities

- Passion for delivering reliable and secure information technology solutions combined with the highest levels of customer service.

- Strong written, verbal and listening communication skills.

- Willingness to learn new technologies and obtain and maintain required technical certifications.

- Ability to establish and maintain effective working relationships, exhibit a positive attitude, and collaborate with others to provide high level of customer service.

- Understanding of TCP/IP and related protocols used to support switching, routing, and logical access control functions.

- Ability to manage multiple priorities simultaneously and work with frequent interruptions.

- Ability to work occasionally during the evenings, weekends, after hours and on-call for both scheduled and unscheduled events.

Qualified candidates

Required criteria

- Education: Bachelor’s degree in computer information systems, computer science, cybersecurity, or related field or equivalent combination of education and experience.

- Certifications (have or be able to obtain within first year of employment):

- ITIL training

- GCIH (GIAC Certified Incident Handler)

- License: Valid driver’s license and ability to remain insurable under the vehicle liability policy.

- Experience: At least three years of work experience in an enterprise information system environment, and one year in enterprise-level cybersecurity.

Pay

This is an exempt role; salaries are paid bi-weekly and are annualized below for reference. Factors that may be used to determine actual salary include specific skills, years of experience, education, and certifications.

- Full range: $111,447 to $156,026

- Hiring range: $111,447 to $133,846