PSEG
Senior Cyber Security Analyst
PSEG, Bethpage, New York, United States, 11714
Requisition : 80200PSEG Company:
PSEG Long IslandSalary Range : $101,600 - $160,900Incentive : PIP 15%Work Location Category : Remote LocalPSEG operates under a Flexible Work Model where flexible work is offered when job requirements allow. In support of this model, roles have been categorized into one of four work location categories: onsite roles, hybrid roles that are a blend of onsite and remote work, remote local roles that are primarily home-based but require some level of purpose-driven in-person interaction and living within a commutable distance, and remote non-local roles that can be effectively performed remotely with the ability to work in approved states.We want you to be healthy, balanced, and feel secure. That’s why you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer a retirement program, 401(k) with company match, company paid life insurance, tuition reimbursement and a minimum of 18 days of paid time off per year.PSEG offers a unique experience to our more than 12,000 employees – we provide the resources and opportunities for career development that come with being a Fortune 500 company, as well as the attention, camaraderie and care for one another you might typically associate with a small business. Our focus on combatting climate change through clean energy technology, our new net zero climate vision for 2030 and enhanced commitment to diversity, equity and inclusion; and supporting the communities we serve make this a particularly exciting time to join PSEG.Job Summary
This position is an experienced, senior level, hands-on technical lead, performing IT security functions and maintaining systems, while providing technical guidance to the team. Protects PSEG’s sensitive data to reduce the risk of data exfiltration and misuse. This engineering resource collaborates with Cyber Governance & risk to integrate technical data protection mechanisms. This individual ensures data security best practices and organizational objectives are aligned and implements controls to continuously monitor and improve elements such as data classification, data protection, and data encryption (at rest & in motion).Job Responsibilities
Include but are not limited to:Coordinate with stakeholders to develop a data protection roadmap to ensure sufficient technical controls to secure PSEG’s dataImplement defined data security requirements and specificationsImplement and improve data monitoring capabilities as part of a data security program to improve visibility and protect PSEG LI’s data from malicious attacksApply cybersecurity functions (e.g., encryption, access control, and identity management) to reduce exploitation opportunities on PSEG’s DataActively detect and prevent unauthorized egress of PSEG dataImprove technology to automate and improve data security capabilitiesSupport the development and maintenance of data security technologiesEnsure technical controls allow for appropriate data security capabilities including classification, discovery, and business functions to secure all data at rest and in transitJob Specific Qualifications
Required Qualifications:Bachelor's degree and 6 years of relevant cyber security experience
In lieu of a degree, 10 years of cyber experience
Experience managing information security technologies such as IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response.Demonstrated strong understanding of encryption protocols, including TLS 1.3Demonstrated strong familiarity with data privacy and relevant regulations, standards, and guidelines, such as GDPR, CCPA, ISO 27001, NIST CSF, and other industry-specific regulationsTechnical experience includes: information / data / network / computer security design, administration and/or assessment.Broad knowledge of information systems including Windows security, network security, systems development, communication networks, security software/hardware and operating systems.Experience providing technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.Demonstrated ability to follow cyber security news and alerts in order to understand complex attack vectors and risks including the ability to identify and evaluate emergent cyber security threats and vulnerabilities.Experience designing process flows to be implemented in security automation tools to automatically respond to threats quickly and effectively.Ability to review complex architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.Must be able to work independently with little or no supervision.Experience working in a team environment, with experience teaching and learning from other team members.Ability to foster working relationships with the team, IT Management and Client departments.Ability to explain technical concepts to the business users in the context of business requirements.Demonstrated ability to communicate effectively with both technical and non-technical individuals.Desired Qualifications:ISC2 Certified Information Systems Security Professional (CISSP) or equivalentProgramming Experience in PythonMinimum Years of Experience:
6 years of experienceEducation:Certifications:
None NotedDisclaimer
Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.PSEG is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.As an employee of PSEG you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations.For all roles, PSEG’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. For employees in federally regulated roles (including positions covered by USDOT, PHMSA, or NRC regulations), this also includes random testing. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and/or medically, it is prohibited for employees in federally regulated roles. Employees who are hired or transfer into a federally regulated role are subject to drug and alcohol testing, inclusive of marijuana. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for such a positive result.PSEG employees must apply for jobs internally through emPower which can be accessed through
sharepoint.pseg.com
by clicking on the emPower icon, then selecting careers. This site is strictly for candidates who are not currently PSEG employees, with the exception of PSEG employees who do not have company email addresses.PSEG is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com.If you need to request a reasonable accommodation to perform the essential functions of the job, email
accommodations@pseg.com . Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.ADDITIONAL EEO/AA INFORMATION
(Click link below)Know your Rights: Workplace Discrimination is IllegalPay Transparency Nondiscrimination Provision
#J-18808-Ljbffr
PSEG Long IslandSalary Range : $101,600 - $160,900Incentive : PIP 15%Work Location Category : Remote LocalPSEG operates under a Flexible Work Model where flexible work is offered when job requirements allow. In support of this model, roles have been categorized into one of four work location categories: onsite roles, hybrid roles that are a blend of onsite and remote work, remote local roles that are primarily home-based but require some level of purpose-driven in-person interaction and living within a commutable distance, and remote non-local roles that can be effectively performed remotely with the ability to work in approved states.We want you to be healthy, balanced, and feel secure. That’s why you’ll enjoy a comprehensive range of benefits, with a focus on supporting your whole health. Starting on day one of your employment, you’ll be offered several health-related benefits including medical, vision, dental, and well-being and behavioral health programs. We also offer a retirement program, 401(k) with company match, company paid life insurance, tuition reimbursement and a minimum of 18 days of paid time off per year.PSEG offers a unique experience to our more than 12,000 employees – we provide the resources and opportunities for career development that come with being a Fortune 500 company, as well as the attention, camaraderie and care for one another you might typically associate with a small business. Our focus on combatting climate change through clean energy technology, our new net zero climate vision for 2030 and enhanced commitment to diversity, equity and inclusion; and supporting the communities we serve make this a particularly exciting time to join PSEG.Job Summary
This position is an experienced, senior level, hands-on technical lead, performing IT security functions and maintaining systems, while providing technical guidance to the team. Protects PSEG’s sensitive data to reduce the risk of data exfiltration and misuse. This engineering resource collaborates with Cyber Governance & risk to integrate technical data protection mechanisms. This individual ensures data security best practices and organizational objectives are aligned and implements controls to continuously monitor and improve elements such as data classification, data protection, and data encryption (at rest & in motion).Job Responsibilities
Include but are not limited to:Coordinate with stakeholders to develop a data protection roadmap to ensure sufficient technical controls to secure PSEG’s dataImplement defined data security requirements and specificationsImplement and improve data monitoring capabilities as part of a data security program to improve visibility and protect PSEG LI’s data from malicious attacksApply cybersecurity functions (e.g., encryption, access control, and identity management) to reduce exploitation opportunities on PSEG’s DataActively detect and prevent unauthorized egress of PSEG dataImprove technology to automate and improve data security capabilitiesSupport the development and maintenance of data security technologiesEnsure technical controls allow for appropriate data security capabilities including classification, discovery, and business functions to secure all data at rest and in transitJob Specific Qualifications
Required Qualifications:Bachelor's degree and 6 years of relevant cyber security experience
In lieu of a degree, 10 years of cyber experience
Experience managing information security technologies such as IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response.Demonstrated strong understanding of encryption protocols, including TLS 1.3Demonstrated strong familiarity with data privacy and relevant regulations, standards, and guidelines, such as GDPR, CCPA, ISO 27001, NIST CSF, and other industry-specific regulationsTechnical experience includes: information / data / network / computer security design, administration and/or assessment.Broad knowledge of information systems including Windows security, network security, systems development, communication networks, security software/hardware and operating systems.Experience providing technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.Demonstrated ability to follow cyber security news and alerts in order to understand complex attack vectors and risks including the ability to identify and evaluate emergent cyber security threats and vulnerabilities.Experience designing process flows to be implemented in security automation tools to automatically respond to threats quickly and effectively.Ability to review complex architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.Must be able to work independently with little or no supervision.Experience working in a team environment, with experience teaching and learning from other team members.Ability to foster working relationships with the team, IT Management and Client departments.Ability to explain technical concepts to the business users in the context of business requirements.Demonstrated ability to communicate effectively with both technical and non-technical individuals.Desired Qualifications:ISC2 Certified Information Systems Security Professional (CISSP) or equivalentProgramming Experience in PythonMinimum Years of Experience:
6 years of experienceEducation:Certifications:
None NotedDisclaimer
Certain positions at the Company may require you to have access to Part 810-Controlled Information. Under the law, the Company is limited in who it can share this information with and in certain circumstances it is necessary to obtain specific authorization before the Company can share this information. Accordingly, if the position does require access to this information, you must complete a 10 CFR Part 810 Export Control Compliance Nationality Request Form, a copy of which will be provided to you by Talent Acquisition if an offer is made. If there is a need for specific authorization, due to the time it takes to obtain authorization from the government, we will likely not be able to further proceed with an offer.PSEG is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.As an employee of PSEG you should be aware that during storm restoration efforts, you may be required to perform functions outside of your routine duties and on a schedule that may be different from normal operations.For all roles, PSEG’s drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing. For employees in federally regulated roles (including positions covered by USDOT, PHMSA, or NRC regulations), this also includes random testing. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and/or medically, it is prohibited for employees in federally regulated roles. Employees who are hired or transfer into a federally regulated role are subject to drug and alcohol testing, inclusive of marijuana. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for such a positive result.PSEG employees must apply for jobs internally through emPower which can be accessed through
sharepoint.pseg.com
by clicking on the emPower icon, then selecting careers. This site is strictly for candidates who are not currently PSEG employees, with the exception of PSEG employees who do not have company email addresses.PSEG is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com.If you need to request a reasonable accommodation to perform the essential functions of the job, email
accommodations@pseg.com . Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.ADDITIONAL EEO/AA INFORMATION
(Click link below)Know your Rights: Workplace Discrimination is IllegalPay Transparency Nondiscrimination Provision
#J-18808-Ljbffr