I. SUMMARY: The Senior Cyber Security Analyst position plays a critical role in the 5 core Cyber functional areas for DC Water. This position is responsible for the administration of deployed Cyber control technologies. Working with other security analyst, the role is part of the Security Operation Center (SOC) which Monitors, Analyzes, Detects and Responds to Cyber incidents on both traditional IT and Operational Technology (OT) networks. Coordinates with Information Technology (IT) team members to ensure individuals have the appropriate access to DC Water Resources as well as assist in Disaster Recovery Operations. Works for the Senior Advisor, Information Security and assist in updating Cyber Controls with intelligence obtained from 3rd party providers. This role is also responsible for the identification of IT assets supporting DC Water’s business processes and having a thorough understanding of Incident Response on a national level. Please note- Security License is not retained at DC Water.

· A Bachelor’s degree in Information Systems, Computer Science, or a related technical field from an accredited college or university, and a minimum of five (5) years of experience in Information Systems, ICS/Industrial focus or an equivalent combination of education and experience is required.

· Specialized experience should include:

Possess a strong understanding of the key functions of Cybersecurity specifically within an industrial/utility environment.
Possess a strong understanding of Cyber Risk mitigation strategies.
Possess a strong understanding of event and incident flows within a Security Event and Incident (SEIM) system.
Ability to Define the problem, generate and select alternatives, and implement solutions.

o An intermediate understanding of Adversarial Tactics, Techniques and Common Knowledge (ATT&CK) framework for Information Technology and Operational Technology Networks.

o Possess a strong understanding of one or more computer programming and/or scripting languages (PowerShell, KQL, Python, etc.).

An intermediate understanding of network ports, protocols, and services.
An intermediate understanding of host and network-based Intrusion Prevention Systems (IPS).
Advance understanding of system and network logging events.
Familiarity with the National Institute of Standards and Technology (NIST) Cyber Control Set.
Outstanding written and verbal communication skills.
Ability to partner with software engineers, quality analysts, to identify course of resolution.
Advance knowledge of the NIST Cyber Incident Response steps.
An intermediate understanding of the MITRE ATT&CK Framework.

DC Water

New Jobs

Senior Cyber Security Analyst