Engineer I through Engineer Lead - Digital Grid Managment / Security Operations Center

Salary Range: $77,661 - $130,111 Relocation: No About Us

Oncor Electric Delivery Company LLC, headquartered in Dallas, is a regulated electricity transmission and distribution business that uses superior asset management skills to provide reliable electricity delivery to consumers. Oncor (together with its subsidiaries) operates the largest transmission and distribution system in Texas, delivering power to nearly 4 million homes and businesses and operating more than 143,000 miles of transmission and distribution lines in Texas.

Summary

Responsible for ensuring the safety of technology platforms inclusive of workstations, server systems, networks, applications, databases and electronic information, and to protect the systems from security violations, access or destruction. Assists with implementing Information Technology security policies covering protocols, applications, networks, client and server systems, personnel and other risk management mechanisms.

We are considering applicants with multiple experience levels. Please view all details related to responsibilities, education, and experience level for each level of consideration.

Engineer Level I- II Key Roles & Responsibilities Engineer I

- Supports and acts as subject matter expert existing security technologies by administering, integrating, maintaining, and troubleshooting systems to ensure good security posture

- Supports onboarding of new security technologies by working with project and vendor teams in order to ensure production system readiness from an operational and technical perspective

- Uncovers information gaps that can help identify potential threats in the short and long term and recommends security enhancements to management or senior Technology staff

- Implements developed use cases to improve overall Security Operations Center (SOC) threat detection capabilities

- Produce and review reports and presentations for management including security recommendations on technology security vulnerabilities, both planned in place, and future direction

- Provide incident management support, and ensure incidents are minimized through design, tools and processes

- Act as an escalation point for security analysts and be able to assist in problem-solving by providing cybersecurity expertise and knowledge of corporate technology environment

- Establishes and maintains relationships with various Oncor workgroups as well as internal and external stakeholders for risk/issue management

- Ensure leadership is apprised of technical and regulatory changes in the security landscape

- A change agent to adapt and drive change throughout the organization

- Strong interpersonal skills, a positive attitude, and the ability to thrive in a fast-paced environment

- Self-motivated, results-oriented with a passion to deliver above par results in a proactive manner

- Perform all essential aspects and functions of the job as well as any other specific job requirements as assigned

Engineer II (In addition to above responsibilities)

- Implement and manage security infrastructure to ensure the secure deployment and operation of applications internally and outside of the SOC

- Integrate diverse technologies in multiple environments to provide monitoring, alerting and reporting

- Develop use cases into existing and future security technologies to further enhance SOC detection capabilities

- Develop and maintains security-related documentation, including procedures, guidelines and best security posture

- Assess and enhance the security of our systems, identifying and mitigating potential risks

- Supports existing security technologies by working with the SOC and vendor teams in order to ensure productions systems are operational from a technical perspective

- Responsible for onboarding of new security technologies by working with project and vendor teams in order to ensure production system readiness from an operational and technical perspective

- Develop and improve automation functions for repetitive tasks in the SOC

- Support Cybersecurity investigations – Cyber Security Incident Response Plan (CSIRP) and make recommendations to management on findings and solutions

- Performs technical reviews of documentation to ensure computer security integration and compliance with regulations (NERC CIP, SOX, ISO, etc.)

Skills

- Ability to obtain or competition of certifications in industry specific and technical fields, such as NERC-CIP and CompTIA Security +, (ISC)2 CISSP, or CEH

- Technical understanding of network concepts, protocols, services and operating systems

- Proven analytical, problem solving, and research skills with readiness to defend analysis

- Advanced verbal and written communication skills

- Ability to work in an open and collaborative environment

- Strong technical understanding of the following:

- Network concepts, protocols, services and operating systems

- Security Information and Event Management systems

- Email security systems

- Intrusion Prevention systems

- Web security systems

- Application control systems

- EDR systems

- Security Orchestration and Automated Response systems

- Anomaly detection systems

- Windows Server and Red Hat Linux environments

- Python, RegEx, and SQL

- AWS cloud security

- Azure cloud security

- Containerization technologies (e.g. Docker, Kubernetes) and orchestration tools

- Vulnerabilities and how attackers can exploit vulnerabilities to compromise systems

Education And Experience

- High School diploma, GED, or equivalent is required

- Bachelor's Degree in Engineering, Information Technology, Computer Science, Cybersecurity or another related field is encouraged to apply

Engineer I

- 2 plus years of cybersecurity or information technology experience is required

- 2 years plus years of experience in cybersecurity monitoring working with security tools is encouraged to apply

Engineer II

- 3-4 plus years of cybersecurity or information technology experience is required

- 2 plus years of experience in cybersecurity systems support is required

- 2 years plus years of experience in cybersecurity monitoring working with security tools is encouraged to apply

Measures of Success

- Actively maintains and troubleshoots existing SOC systems

- Demonstrates collaboration and cooperations with SOC team members and internal partners in a professional maner

- Develops and maintains skillsets to remain current in existing and future technologies

- Demonstrates skills in prioritization and multi-tasking, and success in adapting to change in a fast-paced environment

- Demonstrated understanding of priorities for Technology function and broader organization

- Continuously maintained the assigned Technology function roadmaps and improvement of processes and methodologies

- Engineer level 2 demonstrates aptitude for administrating, maintaining, and integrating SOC systems

- Engineer level 2 demonstrates aptitude for administrating, maintaining, and integrating SOC systems

Engineer Lead

Key Roles & Responsibilities

- Direct oversight of the following directives within the Digital Grid Management Security team:

- Change management. Oversee the planning and scheduling of operational and project activities to ensure timely delivery of system maintenance and project delivery

- Use case development. Develop and implement use cases into existing and future security technologies to further enhance SOC detection capabilities

- Automation development. Design, implement and maintain automated security processes for continuous monitoring, threat detection and incident response

- Aid in the development of subject matter experts of SOC Engineering staff on existing security technologies by educating them in administering, integrating, maintaining, and troubleshooting systems to ensure good security posture

- Uncovers information gaps that can help identify potential threats in the short and long term and recommends security enhancements to management or senior IT staff

- Review and update a detailed product roadmap of existing and future SOC technologies

- Review and finalize weekly, monthly, quarterly, and annual reports and presentations for management including security recommendations on technology security vulnerabilities, both planned in place, and future direction

- Support Cybersecurity investigations – Cyber Security Incident Response Plan (CSIRP) and make recommendations to management on findings and solutions

- Provide incident management support, and ensure incidents are minimized through design, tools and processes

- Evaluate and recommend new security technologies that enhance existing SOC capabilities

- Establishes and maintains relationships with various Oncor workgroups as well as internal and external stakeholders for risk/issue management

- Ensure leadership is apprised of technical and regulatory changes in the security landscape

- Serves as a 360 degree thinking tollgate to ensure One Technology orchestration and alignment is achieved before roll out of significantly impacting technology changes

- Effectively communicates and navigates disruption that can arise with technology delivery protection, and operations

- Oversees assigned Security Operations Center operations and guides transformation, change, and continuous improvement efforts to support business outcomes

- Continuously develops training and progression plans for SOC Engineering team

- Perform all essential aspects and functions of the job as well as any other specific job requirements as assigned

Skills

- Completion of security certifications in industry specific and technical fields, such as CompTIA Security+, CISSP, CEH, or CCNA

- Strong technical understanding of vulnerabilities and how attackers can exploit vulnerabilities to compromise systems

- Proven analytical, problem solving, and research skills with readiness to defend analysis

- Advanced verbal and written communication skills

- Ability to work in an open and collaborative environment

- Strong technical understanding of the following:

- Network concepts, protocols, services and operating systems

- Security Information and Event Management systems

- Email security systems

- Intrusion Prevention systems

- Web security systems

- Application control systems

- EDR systems

- Security Orchestration and Automated Response systems

- Anomaly detection systems

- Windows Server and Red Hat Linux environments

- Python, RegEx, and SQL

- AWS cloud security

- Azure cloud security

- Containerization technologies (e.g. Docker, Kubernetes) and orchestration tools

- Vulnerabilities and how attackers can exploit vulnerabilities to compromise systems

Education And Experience

- High School diploma, GED, or equivalent is required

- Bachelor's Degree in Engineering, Information Technology, Computer Science, Cybersecurity or another related field is encouraged to apply

- 5-7 plus years of cybersecurity or information technology experience is required

- 4 plus years of cybersecurity systems support experience is required

- 2 plus years of cybersecurity monitoring experience is required

Measures of Success

- Ensures coordinated planning and scheduling of operational and project activities in a timely manner

- Ensures SOC product roadmaps are up-to-date and current

- Establishes and implements defined training program for SOC Engineers to develop skillsets

- Demonstrates skills in prioritization and multi-tasking, and success in adapting to change in a fast-paced environment

- Demonstrates ability to collaborate with internal partners in a professional manner

- Demonstrated understanding of priorities for Technology function and broader organization

- Continuously maintained the assigned Technology function roadmaps and improvement of processes and methodologies

Note: The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of personnel. Possible 24x7; on call/off hour security support; weekend; holidays.

Benefits

At Oncor, we offer a comprehensive set of benefits, compensation and performance management programs designed specifically to attract, retain, motivate and reward our high-performing workforce. Our supportive and inclusive culture allows every team member the opportunity to thrive and make a difference. We invest in our employee’s success and well-being by offering such things as:

- Annual incentive program

- Competitive health and welfare benefits (medical, dental, vision, life insurance)

- Ability to earn wellness incentives (up to $2,000 in 2025) and other wellbeing resources

- 401k with dollar-for-dollar company match up to 6%

- 401k match with student debt program

- Cash balance pension plan

- Adoption Assistance

- Mental health resources

- Employee resource groups

- Tuition reimbursement

- Competitive vacation, 10 company holidays and 2 personal holidays

- Paid parental leave

- Salary continuation for up to 6 months for approved employee illness or injury

- Other perks such as commuter benefits, electric vehicle incentive program, appliance purchase plan

Participation in benefit programs for employees in collective bargaining units is subject to the applicable collective bargaining agreement.