Information Security Analyst I

Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team!

Overall Purpose:

The Information Security Analyst I will be an individual contributor on the Corporate Cyber Security Operations (SecOps) team. The operations team is responsible for deploying, operating, and managing various cybersecurity tools in support of the overall Corporate Cybersecurity strategy.

Location: Hybrid (see below), downtown Pittsburgh, Pennsylvania at Woods Run Complex

Job Responsibilities:

• Lead the Security Awareness program by providing training and phishing simulations for the organization.
• Develop and document technical controls for cloud, on-premises, and hybrid environments mapped to company policy and industry standards.
• Develop and document use case and runbooks to be used by the Cybersecurity Incident Response team (CIRT).
• Provide system administration and support of SecOps systems and applications.
• Work collaboratively as part of a team, with moderate supervision to provide relevant input and feedback to develop and maintain documentation for all assigned responsibilities.
• Provide relevant input and feedback on the investigation and proposal of technologies and methodologies that can enhance Duquesne Light's security and/or business continuity posture.
• Manage expectations and effectively communicate and collaborate with colleagues and project team members.
• Work closely and collaborate with both the Incident Response and Engineering Teams
• Provide technical guidance on security and privacy policies and standards development.
• Application hardening and vulnerability assessments.
• Assist CIRT in investigating, responding, and remediating cyber events in the cloud and on premises environments.
• Support and develop processes and procedures related to DFIR, data collection and coordination with external partners as required.
• Develop and distribute weekly reporting to management related to team KPIs.

Education/Experience Requirements:

Roles at this level typically require a university / college degree with0 - 6 months of relevant professional experience.

• Extensive knowledge of threats, risk analysis and the development of security systems and protocols
• CISSP, GSEC or other Information Security certifications
• Hands on experience with a SIEM such as Splunk ES, QRadar, LogRhythm, or others
• Hands on experience with EDR or XDR tools such as Crowd strike, Cisco AMP, Sentinel One, or others
• Hands on experience with Email Security tools such as Proofpoint, Barracuda, Mimecast, or others
• Hands on experience with Network Security tools such Cisco ASA, Infoblox, Extrahop, or others
• Hands on experience with WAF tools such as Imperva, F5, or others
• Hands on experience with Microsoft Security tools
• High-level of understanding and proficiency at securing public cloud environments

Preferred:

• CompTIA Network+, CISCO CCNA or other network certifications
• Experience in cloud and application security
• Familiarity with NIST CSF, Attack Framework and NERC
• Hands on experience with Firewall management such as Checkpoint, Cisco ASA, Palo Alto, or others
• Familiarity with SAST and DAST tools
• General understanding of DevSecOps

Must possess a positive attitude and strong values that fit with DLC's core values:

• Energized to shape the future;
• Bold in thinking and exploration of new possibilities;
• Collaborative in approaching all challenges;
• Responsible in commitment to safety, management of assets and finances and interaction with others;
• Selfless in serving the community, both on the job and through volunteerism

Scope

Responsibilities are generally tactical and basic in nature; however, work may vary in type and complexity, requiring the incumbent to be flexible to adjust to the given situation. Primary focus is on daily deliverables and outputs, while at the same time developing a knowledge of the broader context in which the work is being performed.

Decision Impact

Independent discretion or decision-making capability is mostly limited. There is normally a general framework of established boundaries to help employees perform their roles and make decisions. Situations that require deviation from this general framework are typically not made alone. The employee may recommend a solution; however, the recommendations are frequently presented to their manager or more senior-level professionals for review and approval prior to the decision being made.

Hybrid Work

Position follows our hybrid work model, with a minimum of two days working in the office and the remaining days working remotely. Reporting location and frequency may be subject to change based on job role and department needs.

Storm Roles

All Non-Union Employees will serve in storm roles as appropriate to their role and skillset. Please be sure to discuss storm roles with the hiring manager for this position, as duties can vary across the Company.Examples of storm roles could include but aren't limited to duties such as: working with operations for service center support or with the communications, customer service or government affairs teams to respond to public and customer requests for information, etc.

Data Governance

Utilize data to make business decisions as appropriate for the position, support data stewardship activities and partner with IT on underlying data needs.

EQUAL OPPORTUNITY EMPLOYER

Duquesne Light Holdings is committed to providing equal employment opportunity to all people in all aspects of the employment relationship, without discrimination because of race, age, sex, color, religion, national origin, disability, sexual orientation and gender identity or status as a Vietnam era or special disabled veteran or any other unlawful basis, as defined by applicable law, and fostering a workplace free of unlawful discrimination and retaliation. This policy affects decisions including, but not limited to, hiring, compensation, benefits, terms and conditions of employment, opportunities for promotion, transfer, layoffs, return from a layoff, training and development, and other privileges of employment. An integral part of Duquesne Light Holdings' commitment is to comply with all applicable federal, state and local laws concerning equal employment and affirmative action.

Duquesne Light Holdings is committed to offering an inclusive and accessible experience for all job seekers, including individuals with disabilities. Our goal is to foster an inclusive and accessible workplace where everyone has the opportunity to be successful.

If you need a reasonable accommodation to search for a job opening, apply for a position, or participate in the interview process, connect with us at HR@duqlight.com and describe the specific accommodation requested for a disability-related limitation.