Generation Cyber Security Analyst (Mid-level and Senior)

Dominion Energy is committed to providing reliable, affordable, and increasingly clean energy that powers our customers every day. If you want to work for a purpose-driven company that values safety and collaboration, we’re looking for you. You won’t just find a job here; you’ll find your career. Review the position below and apply today.

Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity.

At this time, Dominion Energy cannot transfer or sponsor a work visa or employment authorization for this position.

Job Summary

Dominion Energy’s Power Generation Business Unit seeks a Generation Cyber Security Analyst or Senior Cyber Security Analyst to support the Power Generation fleet (non-nuclear) with computer, communications, and network security in Operational Technology (OT) Industrial Control System (ICS) environments and ICS Cyber Security environments.

The successful candidate will be able to provide the support noted below in accordance with standards, best practices, and regulatory requirements, for the operating units and auxiliaries:

- Provide ongoing support and oversight for the Industrial Control System (ICS) cyber security and secure network communications. (e.g.: SCADA Systems, DMZ Communications and Replication Systems/Software, Programmable Logic Controller systems “PLC”, Distributed Control Systems “DCS, etc.)

- Recommend and support the implementation of architectures necessary for Power Generation’s cyber security and compliance posture.

- Design, Implement and manage system installations, modifications, and integration of communication protocols and programs/tools in support of secure ICS data and control communications.

- Provide hands on support with computer, software, and network device implementations, account management and review, security hardening, modifications, updates, patches, troubleshooting, and replacement.

- Research, develop, and implement cyber security architectures and communications necessary to maintain the plant cyber security and compliance posture.

- Uphold responsibilities in support of Power Generation and related cyber security project implementations and initiatives.

- Develop and implement secure software and network communication architectures to support data and access communication needs.

- Provide firewall rule development, review, and investigation and coordinate with Power Generation Cyber Security and Information Technology (IT) Groups.

- Provide cyber security and communications related monitoring, surveillance, and troubleshooting.

Continue

- Support cyber security event investigation in coordination with the Incident Response Team.

- As needed: review, analyze, and investigate logs, events, and alerts for potential security breaches.

- Monitor cyber security best practices, industry trends, and regulatory requirements while identifying gaps in cyber security controls and recommend/implement technical or administrative solutions to remediate.

- Follow policy and procedures established by Power Generation Regulatory Compliance and Corporate Cyber Security.

- Support deployment of cyber security equipment patches and upgrades in accordance with policy.

- Review and approve change management and design change packages for cyber security and compliance impacts.

- Address and resolve ICS-CERT vulnerabilities in coordination with compliance and station personnel.

- Develop technical procedures and guidance documents.

- Mentor other staff members to broaden knowledge and technical expertise across the team.

Required Knowledge, Skills, Abilities & Experience

Generation Cyber Security Analyst: 3+ years of experience in operational technology, cyber security, system administration, networks, firewalls, and management of Windows operating systems security.

Generation Cyber Security Sr Analyst: 5+ years of experience in operational technology, cyber security, system administration, networks, firewalls, and management of Windows operating systems security.

(Note: A partial year of related work experience of 6 months or greater will be considered one year towards the qualifications; an advanced degree can count as one year experience).

Must have a ‘hands on’ experience/understanding utilizing cyber security processes and technologies including:

- Cyber security technologies such as network intrusion detection systems, logging and monitoring tools, antivirus tools, whitelisting tools, malware prevention tools, incident response tools, asset inventory systems and security analytics platforms

- Incident analysis, root cause analysis, and problem resolution

- An understanding of industrial control system networks, switches, and firewalls, and the differences of these OT systems from IT systems when applying cyber security controls.

- Strong experience with workstation and server security, protection, and software.

- Experience in security aspects of multiple platforms, operating systems, software, communications, and network devices, architectures and topologies.

- Strong Experience with Network devices (network switches, firewalls, routers)

- Valid driver's license

Other Requirements and Preferred Qualifications:

- Strong level of understanding of security principles, technologies, best practices, and NIST, CISA, and DoE ICS guidance.

- Excellent analytical and problem-solving skills.

- Ability to coordinate multiple projects and assignments concurrently and manage deadlines.

- Strong verbal, written, interpersonal and leadership skills.

- Ability to successfully work both independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight.

Preferred Skills:

- Familiarity with Industrial Control Systems (DCS, PLC, SCADA) and third-party datalink protocols (e.g. Modbus, DNP3, ABPLC, OPC UA, MQTT)

- Strong Microsoft/Cisco system administration experience.

- Network Certifications

Education Requirements

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education: Bachelors's Degree preferred.

Preferred Disciplines:

- Computer Science

- Engineering

- Information Systems

- Other Bachelor of Engineering or Science may be substituted

Licenses, Certifications, or Quals Description

- ISC2 Certification - CISSP preferred, SSCP preferred, ISSAP, ISSEP

- Linux Certifications – RHCSA, RHCE, RHCA, LPIC-1, LPIC-2

- Firewall Certifications – Fortinet NSE4, 5, 6, 7, 8, PCCET, PCNSA, PCNSE

- Network Certifications - CCNA, CCNP, CCIE, RHCSA, RHCE, RHCA

- Security Certifications - OSCP, eCPPT, CISSP, SSCP

- GIAC Certifications – GICSP, GRID, GCIP, GCIH, GCIA, GCFE, GPEN, GSEC, GCFA, GREM

- Comptia Certifications CySA+, CASP+/SecurityX, Network+, Security+

Working Conditions

Office Work Environment 76 -100%

Cold Up to 25%

Dust / Grease / Oil Up to 25%

Heat Up to 25%

Loud Noise Up to 25%

Operating Machinery Up to 25%

Travel 51-75%

Other Working Conditions

Test Description

No testing required.

Export Control

Certain positions at Dominion Energy may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in Dominion Energy limiting its consideration of certain applicants.

Other Information

We offer excellent plans and programs for employees. Employees are rewarded with a competitive salary and comprehensive benefits package which may include: health benefits with coverage for families and domestic partners, vacation, retirement plans, paid holidays, tuition reimbursement, and much more. To learn more about our benefits, click here dombenefits.com.

Dominion Energy is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin and/or status as a protected veteran or individual with a disability.

You can experience the excitement of our company – it's the difference between taking a job and starting a career.