Associate Cyber Security Analyst/Cyber Security Analyst/Senior Cyber Security Analyst

At Dominion Energy we love our jobs. That’s right. Love. Every day we go to work filled with passion to be excellent, to creatively problem solve and to innovate. These are exciting days for energy companies, and Dominion Energy aims to shape the future of energy in America. We are looking at all of our work with fresh eyes, retooling everything we do, in every part of the company, to operate more sustainably and to deliver energy more reliably than ever. We are looking for interesting, independent thinkers and doers who can help shape the culture of a forward-looking company that’s proud of its rich legacy. Are you a change agent? Do you think differently? Do you want to fall in love with your job? If you answered “yes,” then read on!

Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity.

At this time, Dominion Energy cannot transfer nor sponsor a work visa for this position.

This position does not offer relocation assistance.

Job Summary

Do you have what it takes?

This is not your typical cyber role. A cyber war is underway in the world today, with hostile nations seeking to disrupt and destroy critical infrastructure in the United States, all day, and every day. If you want to be on the front lines up against the best cyber criminals and nation state attackers in the world and prove you are better, then this is the place to be.

For our employees, this is a mission, not a job. We educate the company about cyber threats. We establish the standards for cyber security. We perform assessments to ensure proper protections are in place. We manage vulnerabilities and guide the development of defenses. It takes a high degree of skill and a commitment to that mission to be successful.

If this description sounds like you, let’s talk.

This position is responsible for the identification, assessment, and communication of cyber security risks to help protect the company from internal and external threats.

Performs cyber security and cyber risk work, working closely with other groups focused on the monitoring, analysis, and investigation of cyber security threats and events, both internal and external, that could potentially impact the security posture of the organization. Helps facilitate cyber security awareness throughout the organization by educating personnel through the development of awareness articles, presentations, training courses or other materials. Facilitates client requests to ensure critical business tasks continue uninterrupted. Performs assessments of cyber security risk and vulnerabilities and maintains security policies. Provides updates and detailed information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information and systems. May collaborate with other staff to assess the cyber security risk on the organization's network systems, applications, and solutions based upon user requests and business needs. Applies an understanding of IT technologies and develops an evolving knowledge of mitigation options and risk frameworks to assess the current threat landscape and improve security. May consult with subject matter experts and business representatives, as needed, to provide input on cyber security decisions, the establishment of cyber security policies, and to foster security awareness. May serve as a participant in the cyber security incident response program. Works in a team environment to mitigate cyber security threats, improve processes and security posture. May conduct cyber threat research into threat actors and campaigns, as well as technological advances to combat unauthorized access. May assist with root cause investigation and proper mitigation of cyber security events.

While the job summary covers a wide variety of functions, the initial focus of the position will include the facilitation and continuous improvement of risk assessments and security awareness processes.

This position will require in office work every week at the Richmond, VA office.

23261

Required Knowledge, Skills, Abilities & Experience

Associate Cyber Security Analyst:

• Must possess 1-2 years of work experience in cyber security or a cyber risk related role -OR- a bachelor’s degree with a focus on cyber security.
• Basic understanding of cyber security and data protection principles and practices.
• Experience authoring articles, developing videos or other content, or user instruction and education desirable.
• Demonstrated organization and planning skills.
• Demonstrates a questioning attitude, with basic analytical and investigative skills.
• Demonstrates verbal and written communication skills, with the ability to interact effectively with others.
• Willingness to learn new skills and methodologies, conduct research, and learn to assess cybersecurity risks.
• Ability to work cooperatively in a teamed environment.
• Highly motivated, with the ability to work effectively under basic supervision in a fast-paced environment.
• Previous work experience or exposure to the security aspects governing software, communications, and network protocols is a plus.
  
  

Cyber Security Analyst

In addition to the above experience, the Cyber Security Analyst must also have:

• Must possess at least 3-5 years of work experience in cyber security or a cyber risk related role demonstrating a general knowledge in the identification, gathering and analysis of information, threats, etc. to investigate and mitigate security risks.
• Demonstrates a working knowledge of cyber security best practices and frameworks.
• Possesses a solid understanding of industrial cyber security standards, frameworks and risk assess modeling.
• Demonstrated time and project management skills.
• Experience in security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Experience in assessment of risks and evaluation of security posture against a framework such as NIST CSF, CIS 20, etc. is a plus.
  
  

Sr Cyber Security Analyst (Note: A Master's degree will count as one year of experience. A partial year of six months or more will be rounded up to one year).

In addition to the above experience, the Senior Cyber Security Analyst must also have:

• Must possess 5 years of work experience in cyber security or a cyber risk related role demonstrating a solid understanding of the identification, gathering and analysis of information, threats, etc. to investigate and mitigate security risks or related IT networking or security experience (firewalls, network, security control management, etc.).
  
  

Education Requirements

Preferred

Degree or an equivalent combination of education and demonstrated related experience may be accepted in lieu of preferred level of education:

Bachelor

Preferred Discipline(s): Computer Science; Engineering; Information Systems; Information Systems Security.

Other disciplines may be substituted for the preferred discipline(s) listed above.

Licenses, Certifications, or Quals Description

Preferred: Certified IS Security Professional-CISSP

Working Conditions

Office Work Environment 76 -100%

Travel Up to 25%

Other Working Conditions

Test Description

No Testing Required

Export Control

Certain positions at Dominion Energy may involve access to information and technology subject to export controls under U.S. law. Compliance with these export controls may result in Dominion Energy limiting its consideration of certain applicants.

Other Information

We offer excellent plans and programs for employees. Employees are rewarded with a competitive salary and comprehensive benefits package which may include: health benefits with coverage for families and domestic partners, vacation, retirement plans, paid holidays, tuition reimbursement, and much more. To learn more about our benefits, click here dombenefits.com.

Dominion Energy is an equal opportunity employer and is committed to a diverse workforce. Qualified applicants will receive consideration for employment without regard to their protected veteran or disabled status.

You can experience the excitement of our company – it's the difference between taking a job and starting a career.