System Operations - Cyber Watch

Overview

The System Analyst has direct responsibility for the continued cybersecurity monitoring of the applications, networks and computer systems utilized by System Operation. This function contributes to the success of the Company by ensuring the confidentiality, availability, and integrity of the systems and network.

- At Con Edison we have and we all need to take special interest in our customers, both within the company and externally. As an employee, you need to commit to these ideals of developing a proactive, customer-centric culture to foster trust and confidence among customers and improve value for all our stakeholders.

- Follow and enforce the Departments change management process related to changes to the networks and various electronic systems at the control centers in accordance with regulatory and departmental requirements. Ensure the timing of the changes does not jeopardize the availability and reliability of the systems.

- Promote best practices and use of cybersecurity tools and follow procedures and guidelines to ensure complete compliance with the regulatory requirements, including NERC CIP and FERC Standards of Conduct requirements.

- Support the daily operation of cybersecurity monitoring by ensuring proper cyber hygiene, technical and administrative support of the network, applications, and computer systems at the control centers, including user support, troubleshooting, problem solving.

- Work rotating shifts(days nights weekends holidays) to ensure proper cybersecurity of the network

- Utilize Cyber Security monitoring tools to provide day-to-day support and monitoring of IT and OT assets

- Provide timely response and initial assessment and triaging of cybersecurity alerts.

- Coordinate incident response efforts by working with other teams

- Testing and deployment of up-to-date antivirus and antimalware signatures

- Issuing daily reports of cybersecurity status to internal and external stakeholders

- Perform various assignments as directed by the supervisors and managers.

- Perform other related tasks and assignments as required.

Qualifications

Required Education/Experience

- Master's Degree in Engineering, Computer Science or related field and a minimum of 1 year relevant cybersecurity experience or

- Bachelor's Degree in Engineering, Computer Science or related field and a minimum of 2 years relevant cybersecurity experience or

- Associate's Degree in Engineering, Computer Science or related field and a minimum of 4 years relevant cybersecurity experience or

- High School Diploma/GED and a minimum of 5 years relevant cybersecurity experience.

Relevant Work Experience

- Relevant experience includes but is not limited to computer networking and information technology. Required

- Strong interpersonal and communication skills (written and verbal) and the ability to interact with personnel on all levels. Required

- Experience in Cybersecurity monitoring. Required

- Experience in Cybersecurity incident response Preferred

- Experience working in a Cybersecurity Operations Center Preferred

- Experience in Threat Hunting Preferred

- Experience with computer languages or scripting, and PowerShell. Preferred

- Experience with Anti-Virus Solutions Preferred

- Experience with Security Information Event manager solutions such as Splunk. Preferred

- Experience with firewalls Preferred

Licenses and Certifications

- Driver's License Required

- Other: GIAC Cyber Certifications Preferred

Additional Physical Demands

- The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.

- Must be able and willing to travel within Company service territory, as needed.

- Must be able to lift network equipment and servers (approximately 50lbs).