Associate Ops Cybersecurity Analyst

This position will support the Cybersecurity program for operational assets. The Ops Cybersecurity organizations provide direct service and support to generating stations in their assigned business unit. This work will ensure compliance with the Duke Energy enterprise cybersecurity requirements. This includes response to cybersecurity threats and events as well as implementation of the cybersecurity program. The cybersecurity programs include all infrastructure asset security including but not limited to firewalls, endpoint protection, and industrial control systems (ICS.) The work includes hands on activities such as patching, antivirus protections, account management, cyber asset inventory, and security baselines.

The associate analyst is responsible for day-to-day activities in support of the cybersecurity program and policies. This may include maintenance (patching and upgrades), support of new installations, response to identified threats and vulnerabilities, and other items, as directed. The associate analyst will perform work to support overall grid stability based on implementation of the applicable cybersecurity program. The analyst will work closely with NERC CIP Compliance personnel to ensure NERC CIP regulatory compliance is maintained.

The associate analyst will also contribute to ongoing development and improvement of the Cybersecurity Program intended to maintain a strong security posture. This may include revision of program documentation as well as participation in design and implementation of projects that impact security.

This position requires understanding of the integrated generating plant systems as well as processes to secure plant cyber assets. The analyst shall demonstrate an understanding of the impact of cybersecurity processes on generating systems and the overall electric grid.