Requisition : 82325
PSEG Company : PSEG Long Island
Salary Range : $ 93,600 - $ 148,200
Work Location Category : Hybrid Flexible
We're one of the country's largest energy companies, with a vision of powering a future where people use energy more efficiently and it's safer and delivered more reliably than ever. We're also deeply connected to the communities we serve, with more than 13,000 employees working together to support our customers and make a difference every day.
Here, you'll have the stability and exciting opportunities that come with being a Fortune 500 company - along with a supportive, friendly work environment where your contributions are valued. We know life isn't one-size-fits-all, and neither is work. That's why we offer flexible work options depending on the role.
In support of this model, roles have been categorized into one of three work location categories:
Onsite - roles where employees are expected to be onsite daily.
Hybrid fixed - roles that are a mix of remote work and onsite work fixed days each week.
Hybrid flexible - roles that are a mix of remote work and onsite work, but the onsite requirements have greater flexibility. (i.e. 5-8 days a month vs. set days each week).
As an employee, if you are regularly scheduled to work 20 or more hours per week, you will have access to a wide range of comprehensive benefits designed to support your total well-being: medical, dental, vision, paternal leave and family leave programs, behavioral health programs, 401(k) with company match, life insurance, tuition reimbursement, and generous paid time off.
More than 13,000 people already call PSEG their work home, taking pride in providing safe, reliable service to millions of customers. If you're looking for a place where you can build a meaningful career and help power and support our communities, we'd love to welcome you to the team.
PSEG is not offering visa sponsorship for this position.
Job Summary
This position is an experienced, hands-on practitioner and representative of the cybersecurity defense team, performing cybersecurity functions, especially related to investigating cybersecurity alerts, incident response, and threat hunting. Utilizes information security technologies such as antivirus, IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response. Provides technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.
Job Responsibilities
Provide technical expertise and support to clients, IT management and staff in cybersecurity threat risk assessments, development, testing and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.
Review complex architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.
Follow cyber security news and alerts, understands complex attack vectors and risks, and identifies and evaluates emergent cyber security threats and vulnerabilities. Recommends appropriate corrective actions for information security incidents and provides risk mitigation recommendations to management and team.
Design process flows to be implemented in security automation tools to automatically respond to threats quickly and effectively.
Provides technical expertise in threat/risk assessments.
Define, designs, and implements strategies to protect against emerging threats using security tools.
Please note this is a NERC CIP position and requires NERC CIP background investigation prior to start.
Roles that include NERC CIP responsibilities:
Owns functional tasks on day-to-day compliance with the all the NERC Standard's Requirements assigned.
Serves as contact for all assigned compliance activities. Coordinates the reviews and approvals as specified in Standard Requirements.
Ensures required policies/procedures are followed and that any local dept-level procedures encompassing the NERC Compliance Standards Requirements are up to date.
Provides materials for required reviews and approvals of all assigned compliance activities for submission.
Works with SME Mgrs and Lead SME Contributor on functional day-to-day compliance activities to ensure all are effectively coordinated, sustained in the LOB. Provides updated and approved input to the Lead SME for the Reliability Standard Audit Worksheets, CIP Evidence Request Tool, O&P Evidence Tracking Sheet and for all assigned NERC Standard. Includes FERC, NERC, NPCC, LIPA, NY State, DHS.
Job Specific Qualifications
Bachelor's degree in Computer Science, Information Systems, Cyber Security, Engineering or related discipline with 4 or more years of experience in Information Security or areas required below
Without a bachelor's degree for a Cyber Security Analyst, a minimum of 8 years of experience in Information Security or areas required below
Proficient with security operations solutions
Broad knowledge of information systems including Windows and *nix operating systems security, network security, systems development, communication networks, and security software/hardware
Experience conducting organization-wide vulnerability scanning and remediation processes.
Understanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle.
Experience with key information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis.
Department of Energy's regulation 10 CFR 810 is required.
Desired
Experience in Operational Technology (OT) Security is a plus
Some experience with vulnerability management
Experience with cyber investigations and/or threat hunting, or using information security technologies such as antivirus, IDS/IPS, SIEM, endpoint detection & response, DLP, data encryption, proxies, and network access control, as well as security policies and procedures, and incident response
Some positions at PSEG require access to information covered by the Department of Energy's regulation 10 CFR 810 (Part 810). If applicable, the successful applicant must prove they are: (1) a citizen or national of the USA; OR (2) a lawful permanent resident of the United States (Non-Conditional Permanent I-551 / Green Card / Permanent Resident Card holder); OR (3) a citizen, national, or permanent resident of a "Generally Authorized" destination on the attached list and not also a citizen, national, permanent resident of any country not listed; OR (4) a "Protected Individual" under the Immigration and Naturalization Act (8 U.S.C 1324b(a)(3)).
As an employee of PSEG Long Island, you should be aware that during storm/outage restoration efforts, you may be required to perform functions different from normal operations and work extended hours beyond your regular work schedule. You may also be required to work on premise or in an alternate location as directed by the company.
For all roles, PSEGLI's drug and alcohol testing program includes pre-employment testing, testing for cause, and post-incident/accident testing.
Employees who are hired or transfer into a federally regulated role (including positions covered by USDOT, PHMSA, or NRC regulations) are subject to random drug and alcohol testing, inclusive of marijuana. Although numerous states throughout the country have legalized marijuana/cannabis products recreationally and medically, the use of these products are prohibited for employees in federally regulated roles. Please note that the use of CBD products may result in a positive drug test for THC/Marijuana and such use is not a legitimate medical explanation for a positive result.
If you are a current PSEG employee and offered an opportunity with PSEG Long Island, you will be treated as a new hire. Please note that as a new hire to the Long Island subsidiary, your benefits will change and generally will be consistent with other similarly situated PSEG Long Island new hires. Similarly, for PSEG Long Island employees who accept job opportunities with PSEG or any of its subsidiaries (other than PSEG Long Island), their benefits will change and generally be consistent with other similarly situated new hires of that company.
PSEGLI is an equal opportunity employer, dedicated to a policy of non-discrimination in employment, including the hiring process, based on any legally protected characteristic. Legally protected characteristics include race, color, religion, national origin, sex, age, marital status, sexual orientation, disability or veteran status or any other characteristic protected by federal, state, or local law in locations where PSEG employs individuals.
PSEGLI is committed to providing reasonable accommodations to individuals with disabilities. If you have a disability and need assistance applying for a position, please call 973-430-3845 or email accommodations@pseg.com.
If you need to request a reasonable accommodation to perform the essential functions of the job, email accommodations@pseg.com. Any information provided regarding a disability will be kept strictly confidential and will not be shared with anyone involved in making a hiring decision.
ADDITIONAL EEO INFORMATION (Click link below)
Know your Rights: Workplace Discrimination is Illegal
