Cybersecurity Operations Analyst (CSOC Analyst)

What is a Cybersecurity Operations Analyst?

We are seeking a diligent Cybersecurity Operations Analyst (CSOC Analyst) to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The CSOC Analyst will play a key role in monitoring, detecting, and responding to security incidents to ensure the protection of our organization's critical assets. The ideal candidate will have a strong understanding of modern security principles, excellent analytical skills, and the ability to communicate effectively with internal stakeholders and vendors alike.

What does a Cybersecurity Operations Analyst do?

• Continuously monitors security events using various security tools and technologies

• Conducts log analysis to identify suspicious activities and potential security incidents

• Correlates data from multiple sources (such as firewall, web server, and DNS log) to identify patterns and trends

• Conducts trending and correlation analysis of cyber intelligence for the purposes of attribution and establish strategic countermeasures to increase defenses

• Conducts pivoting analysis on Threat Intelligence to identify current impact or proactively processes mitigations for defense through security technologies and proactive mitigations

• Responds to and investigates security incidents, triages and prioritizes security alerts based on severity and potential impact

• Processes both internal and external Cyber Threat Intel to determine the potential threat and impact to the Company

• Writes intelligence and technical articles for knowledge sharing; leads strategic projects and develops capabilities to enhance existing cyber intelligence functions

• Identifies gaps in intelligence gathering strategy and leads changes in covering identified gaps

• Notifies leadership of significant security threats, develops and drives reporting methods for situational awareness, and generates detailed reports on security incidents, including findings and recommendations

• Performs proactive threat hunting within the corporate environment, maintaining detailed records of activities, findings, and remediation actions

• Promotes and raises awareness by educating others about the importance of cybersecurity

• Participates in continuous improvement efforts to enhance SOC processes, tools, and capabilities

• Coordinates with the appropriate organizations within Central Hudson regarding possible security incidents and works with other affected areas to determine the risk of a given event

• Maintains an established professional presence in the industry and business relationships with key technical dependent industries and organizations to support the application of technology to specific business areas

• Participates in a 24/7 shift environment, including nights, weekends, and holidays and on-call rotation as needed to respond to security incidents outside of regular working hours

• Provides storm/emergency response support

What does it take to be a Cybersecurity Operations Analyst?

Required:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field of study. In lieu of a bachelor’s degree, an associate degree in the aforementioned fields and 3 years of cybersecurity operations or related experience or a high school diploma or equivalency degree and 5 years of cybersecurity operations or related experience will be considered

• Knowledge of common and emerging attack vectors, penetration methods and countermeasures

• Proficiency with SIEM and EDR tools

• Understanding of a broad range of security technical concepts

• Familiarity with scripting languages for automation and analysis

• Effective communication skills, with the ability to collaborate with diverse teams, and communicate complex concepts clearly and concisely

• Must have excellent analytical, multitasking, and organizational skills

• Excellent decision-making skills

• Ability to work with limited direct supervision and professionally respond to constructive feedback

• Ability to work 24x7x365 rotating shifts (nights, weekends, holidays included)

• Valid driver’s license

Preferred:

• 2+ years of experience performing CSOC Analyst duties

• Experience in conducting risk assessments, developing risk mitigation strategies and evaluating contractual agreements

• Experience in Energy & Utilities or services industry

• Experience with threat hunting

• Experience with data visualization tools

• Relevant certifications such Systems Security Certified Practitioner (SSCP), CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+)

Applications will be accepted until December 6, 2024.

This position has a career path which allows for advancement opportunities within a job series.  The title and level are commensurate with experience. Pay range: $69,800 – $163,800

Please go to https://www.cenhud.com/employment. Click the “Search Career Opportunities” button. Follow the directions to submit an application and upload your resume for the desired position.

Applications sent via e-mail and US Mail will not be accepted.  No phone calls or agencies, please.  All replies will be held in strict confidence.

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, creed, color, ethnicity, arrest or conviction record, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, citizenship, genetic information, familial status, marital status, pregnancy-related condition, domestic violence victim status, veteran or military status, or any other characteristic protected by federal, state or local laws. Central Hudson Gas & Electric Corporation takes affirmative action in support of its policy to employ and advance in employment individuals who are minorities, women, protected veterans, and individuals with disabilities.

VEVRAA FEDERAL CONTRACTOR