Info Security Engineer II - Pittsburgh, United States - Duquesne Light

Duquesne Light Pittsburgh, United States

1 week ago

Description

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service.

Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team

Business Unit:
Information Technology (IT)

Division:
Information Security (ITSec)

Department:
Information Security (InfoSec)

Cost Center:
CIP Cyber Security Operations (550)

Job Family:
Information Technology

Discipline:
Information Security - Operations and Engineering

Career Level:
Specialist II

Overall Purpose:

DLC is seeking candidates for the role of Information Security Engineer I on the Cybersecurity Operations ("Cyber Ops") team, directly supporting NERC CIP requirements and critical infrastructure security.

The Information Security Engineer is responsible for ensuring that Duquesne Light systems and networks are secure.

This is done through the deployment of security solutions, executing system and application hardening, vulnerability assessments, and diligent monitoring of networks and systems for signs of infection, compromise, and misconfiguration.

Additional responsibilities include ensuring that network and system architectures are designed in a way to minimize risk while allowing for necessary functionality and performing Incident Response activities in the event of a security breach.

This group is also accountable for communicating information security risks to management and implementing plans to mitigate or resolve identified risks.

This role reports directly to the Sr. Manager of CIP Cybersecurity Operations under the Office of the CISO/Information Security organization.

Job Responsibilities:
Day-to-day management of operational execution for areas managed.

Directs available resources to accomplish process improvement.

Work with the IT Department in the maturation and configuration of security controls including but not limited to antivirus, SIEM, IT/OT vulnerability management, and network security technologies.

Effectively and efficiently manage security event monitoring, tuning, and incident response.

Responsible for ongoing security engineering support, maintenance, and availability of security toolsets based on business requirements and adherence to tight operational, security, and procedural models.

Extensive knowledge of threats, risk analysis, and the development of security systems and protocols.

Develop and help IT implement network security controls.

Responsible for ensuring adequate and timely resolutions to all assigned issues relating to critical infrastructure security.

Ensure optimal configuration standards are met on existing infrastructure.

Monitor daily for cybersecurity events on DLC's network, and report findings to the Cybersecurity Operations Supervisor.

Review endpoints to confirm compliance with endpoint security policies, procedures, and standards.

Performs forensic analysis of host-based systems.

Stay up to date on changes in threat landscape impacting Duquesne's information security program.

Research, investigate, communicate, and integrate actionable threat intelligence information in DLC Cyber Security Operations and IT systems.

Trains and develops staff. Plans the workflow.

Leads workflow changes and implementations for direct team.

Perform all other duties as assigned.

Experience/Skills:

Expert level demonstrated understanding of all core cybersecurity topics such as vulnerability management, incident response, endpoint protection and network security.

Proficient at technical writing and documenting procedures and processes.

Strong interpersonal, communication and organizational skills with the ability to exhibit sound judgment and express verbal and written information effectively.

Strong written and verbal communication and presentation skills.

Demonstrated ability to interact with people and translate complex concepts into easy-to-follow ideas and present to all levels of the organization.

Strong analytical and project management skills.

Ability to prioritize efficiently while multi-tasking, dealing with interruptions, and working in a high paced energetic environment.

Experience participating in security and regulatory audits, including evidence gathering and analysis

Preferred:
Previous utility experience in transmission and distribution operations, or other industries utilizing SCADA systems and IT/OT environments.

Experience with the NERC CIP compliance framework and/or other regulatory frameworks governing Cybersecurity Operations.

Experience utilizing security products including Tripwire Enterprise, Trellix ESM, Tenable Nessus, Symantec Endpoint Protection, and Cisco FMC.

Experience with Systems Administration in server environments including Microsoft Windows and Linux Operating Systems.

Experience with network security controls in air gapped/segmented network environments.

Information Security certifications including CISSP, CCNA, SANS GIAC.

Experience with coding/scripting languages including Python, PowerShell, and SQL.

Education/Certification Requirements:
Bachelors or equivalent combination of education and experience - Education in Cybersecurity/Computer Forensics or related field.

10+years of relevant work experience.

Scope

In addition to daily deliverables, outputs and reporting, also considers and recommends longer term best practices to improve processes based on experience.

Accountable for managing ones own time and work flow and may also lead functional project teams. Works independently, requiring guidance in only the most complex situations. Has well established capabilities, acts as a resource to less experienced staff on complex issues.

Decision Impact

Problems and issues faced are vague and require reasoning to identify root cause. Draws on significant past experience to perform role. Accountable for direct level of reasoning and decision making

EQUAL OPPORTUNITY EMPLOYER

Duquesne Light Company is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation.

This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment.

An integral part of Duquesne Light Company's commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Company is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities.

Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at and describe the specific accommodation requested for a disability-related limitation.

#J-18808-Ljbffr

Security Engineer

1 week ago

Motion Recruitment Partners, LLC Pittsburgh, United States

A large, global law firm based out of Pittsburgh, PA is looking to bring on a Security Engineer in their downtown location. This position will be an integral part of their Cyber Security Program, acting as a strong general blue team engineer with an emphasis on vulnerability mana ...
Security Engineer

1 week ago

Motion Recruitment Pittsburgh, United States Full time

A large, global law firm based out of Pittsburgh, PA is looking to bring on a Security Engineer in their downtown location. This position will be an integral part of their Cyber Security Program, acting as a strong general blue team engineer with an emphasis on vulnerability mana ...
Security Engineer

3 weeks ago

PNC Pittsburgh, United States

Position Overview · At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. As a(n) [position title] within PNC's [name of division] organization, you will be base ...
Information Security Engineer

2 days ago

BNY Mellon Pittsburgh, United States Full time

Information Security Engineer · Bring your ideas. Make history. · BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of do ...
Cyber Security Engineer

1 week ago

DBSI Services Pittsburgh, United States

Job Title: Cyber Security Engineer · Location: Rochester, NY & Pittsburg, PA · Job Type: Contract · Roles and Responsibilities: · Must Have: Hands-on experience in areas like Conducting risk analysis and assessments, implementing cybersecurity policies/controls and responding to ...
Cyber Security Engineer

2 weeks ago

Solegis, Inc. Pittsburgh, United States

We are currently recruiting a Cyber Security Engineer for an industry leader in Pittsburgh. This is a direct hire, permanent role located in Pittsburgh. There *IS* relocation assistance available for candidates not local to the Pittsburgh Metro Area. This is a hybrid role, requir ...
Cloud Security Engineer

4 weeks ago

Aurora Innovation, Inc. Pittsburgh, United States

Partner with our Infrastructure team, and in some cases with development teams that own individual services. In this role, you will Support the team in building security infrastructure and controls in AWS Create automation to solve security problems Security Engineer, Cloud, Secu ...
Product Security Engineer

1 week ago

Seegrid Pittsburgh, United States

Why join Seegrid? · Seegrid is the leading provider of autonomous mobile robots for material handling. Seegrid has been recognized as a Top 5 most innovative robotics company in the world by Fast Company in 2022. We develop and deliver mobile robots and enterprise software for g ...
Senior Security Engineer

3 weeks ago

Ivalua Pittsburgh, United States

Apply NowSenior Security Engineer (Cloud and Infrastructure Security) at Ivalua (View all jobs) · Pittsburgh, PA - US · Senior Security Engineer (Cloud and Infrastructure Security) - Pitsburgh,PA · About Ivalua · A "Magic Quadrant" leader, Ivalua's solutions work in a complex glo ...
Cyber Security Engineer

23 hours ago

Latitude AI Pittsburgh, United States

Latitude AI ) is an automated driving technology company developing a hands-free, eyes-off driver assist system for next-generation Ford vehicles at scale. We're driven by the opportunity to reimagine what it's like to drive and make travel safer, less stressful, and more enjoyab ...
Application Security Engineer

1 week ago

Seegrid Pittsburgh, United States

Why join Seegrid? · Seegrid is the leading provider of self-driving industrial vehicles. We develop and deliver mobile robots and enterprise software for global leaders in logistics, manufacturing, warehousing, and e-commerce. Our suite of solutions includes vision-guided vehicl ...
Cyber Security Engineer

1 week ago

Diverse Lynx Pittsburgh, United States

Cyber Security Engineer · Alstom, Rochester, NY & Pittsburg, PA - Onsite · C2C Rate as per the market. $70-$80/hr.( Flexible) · Local preferred · Rail/Metro/Aero/Telecom industry experience is must. · Must Have: Hands-on experience in areas like Conducting risk analysis and ass ...
Cyber Security Engineer

1 week ago

CY9 Pittsburgh, United States

Job Title : Cybersecurity Engineer · Location: Rochester, NY & Pittsburg, PA - Onsite · Must have: Rail/Metro/aeronautics. · Must Have: Hands-on experience in areas like Conducting risk analysis and assessments, implementing cybersecurity policies/controls and responding to and r ...
Information Security Engineer

23 hours ago

Hispanic Technology Executive Council Pittsburgh, United States

Information Security Engineer · Bring your ideas. Make history. · BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of dol ...
Cyber Security Engineer

23 hours ago

Intellectt Inc Pittsburgh, United States

Title: Cybersecurity Lead · Location: Milwaukee, WI (Onsite) · Duration: 12 Months · Focus: Medtech security processes, Medtech product security, Cybersecurity, ISO27001, SOC2, HIPAA, GDPR, Regulated environment, FDA · Job Functions: · • Develop deep understanding of Medtech secu ...
Information Security Engineer

1 day ago

BNY Mellon Pittsburgh, United States

Information Security Engineer · Bring your ideas. Make history.BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of dollar ...
Product Security Engineer

5 days ago

Xylem Pittsburgh, United States

We're Hiring for a Product Security Engineer If you are excited and passionate about helping #LetsSolveWater, consider joining our team today Xylem, Inc. is a leading global water technology company servicing more than 150 countries and is dedicated to solving the world's most c ...
Information Security Engineer

6 days ago

Duquesne University Pittsburgh, United States

POSITION SUMMARY: · The Information Security Engineer is responsible for the operational support of Duquesne University's Cyber Security program which includes detection, prevention, incident response and training & awareness as organized and operated by Computing and Technology ...
Information Security Engineer

6 days ago

Duquesne University Pittsburgh, United States

Information Security Engineer - Computing and Technology Services (CTS) · Salary: Commensurate with experience · Benefits: Generousbenefits include paid time off including holidays and vacation, retirementmatch, and tuition remission for employee and dependents.Details at · Loc ...
Product Security Engineer

2 weeks ago

TeleTracking Technologies, Inc. Pittsburgh, United States

Job Description · Job DescriptionJob Summary · The Lead Product Security Engineer will work closely with software development teams to build secure products, ensuring security controls are available by default, and educating stakeholders on best practices and standards. You will ...