Apply on Employer Site

Eversource Energy · 18 hours ago

Cyber Defense Analyst (Hybrid)

Westwood, MA

Full-time

Hybrid

Mid Level

$91K/yr - $101K/yr

3+ years exp

Eversource Energy is a company focused on managing and protecting computer assets, networks, and information systems. They are seeking a Cyber Defense Analyst to lead the handling of Information Security incidents and ensure compliance with security policies through monitoring and auditing information systems.

DeliveryElectrical DistributionEnergyEnergy EfficiencyNatural ResourcesOil and GasRenewable EnergyStaffing Agency

No H1B

Responsibilities

Performs Incident Response functions for the SOC team to ensure incidents are handled appropriately to minimize risk and impact to the company

Analyzes and processes case work relating to computer security vulnerabilities, phishing, malware, and forensic investigations

Ability to anticipate and respond to changing priorities, and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness

Leads security incidents to ensure timely mitigation and remediation efforts are completed

Preserves, harvests, and processes electronic data according to company policies and regulatory requirements. Participates in forensic investigations as required, to include the collection, preservation of electronic evidence, analysis, and creation of a final report

Produces high quality oral and written work, presenting complex technical matters clearly and concisely with audiences ranging from peers to Sr. Management

Must be familiar with current and proposed laws, regulations, industry standards, and ethical requirements related to information security and privacy

Recommends effective process changes to enhance defense and response procedures

Evaluates, tests and selects security tools, evaluation products and control products

Assists with annual SOX, CIP and SOC assessment and related remediation efforts

Qualification

Information security standardsIncident responseDigital investigationsSecurity monitoringForensic investigationsSANS certificationCommunication skillsTeamworkFlexibilityLeadership

Required

Eversource will not offer immigration-related sponsorship for this position

Must have an extensive understanding of digital investigations, and underlying principles of networking, infrastructure and system integration

Performs Incident Response functions for the SOC team to ensure incidents are handled appropriately to minimize risk and impact to the company

Analyzes and processes case work relating to computer security vulnerabilities, phishing, malware, and forensic investigations

Ability to anticipate and respond to changing priorities, and operate effectively in a dynamic demand-based environment, requiring extreme flexibility and responsiveness

Leads security incidents to ensure timely mitigation and remediation efforts are completed

Preserves, harvests, and processes electronic data according to company policies and regulatory requirements

Participates in forensic investigations as required, to include the collection, preservation of electronic evidence, analysis, and creation of a final report

Produces high quality oral and written work, presenting complex technical matters clearly and concisely with audiences ranging from peers to Sr. Management

Must be familiar with current and proposed laws, regulations, industry standards, and ethical requirements related to information security and privacy

Recommends effective process changes to enhance defense and response procedures

Evaluates, tests and selects security tools, evaluation products and control products

Assists with annual SOX, CIP and SOC assessment and related remediation efforts

Strong working knowledge of information systems security standards and practices

Bachelor's degree in Information Systems, related technical degree or equivalent experience

Minimum of three (3) to five (5) years of experience in the field of information security

Experience with one or more of the following: Security Monitoring; database security, policies and procedures, active directory, cryptography/PKI, application security assessments, risk assessments, security awareness or related information security subject area

Must be available to work emergency restoration assignment as required

Must be available to travel between MA/CT/NH as necessary

On-call and need to work off hours