Reference #: 18869 Duquesne Light Company, headquartered in downtown Pittsburgh, is a leader in providing electric energy and has been in the forefront of the electric energy market, with a history rooted in technological innovation and superior customer service. Today, the company continues its role as a leader in the transmission and distribution of electric energy, providing a secure supply of reliable power to more than half a million customers in southwestern Pennsylvania.

Duquesne Light Company is committed to creating a culture of inclusion. We value and respect the unique differences and experiences of our employees. We believe that our differences lead to better collaboration, innovation and outcomes. We want you to join our team!

Overall Purpose: DLC is seeking candidates for the role of Information Security Analyst I on the Cybersecurity Operations ("CyberOps") team, directly supporting NERC CIP requirements and critical infrastructure security. The Information Security Analyst is expected to understand the organization's information security strategy and contribute to the development, maintenance, and implementation of the overall system-wide information security program needed for the protection of Duquesne Light.

As part of the CyberOps team, the Information Security Analyst will need to possess business acumen and the ability to assess security risks, while considering system operational needs and adherence to regulatory requirements, directly anticipating and articulating potential operational impacts of policy and controls changes. They will utilize various tools and methods to provide support to end users, technology teams, and projects on a regular and ad hoc basis.

The Information Security Analyst will be directly responsible for working collaboratively and effectively with individuals across the enterprise to conduct cybersecurity activities including but not limited to: analyzing information security risk and threat data, monitoring and investigating anomalies, developing security controls/solutions and risk mitigation recommendations, executing system and application hardening, conducting vulnerability assessments, determining information security-related business needs and requirements for potential projects/initiatives, and diligent monitoring of networks and systems for signs of infection, compromise, and misconfiguration.

Location: Hybrid (see below), downtown Pittsburgh, Pennsylvania at Woods Run Complex

Job Responsibilities: Investigate, respond, and remediate cyber events in DLC's critical infrastructure network environment. Provide system administration and support of CyberOps systems and applications related to critical infrastructure. Work collaboratively as part of a team, with moderate supervision to provide relevant input and feedback to develop and maintain documentation for all assigned responsibilities. Provide relevant input and feedback on the investigation and proposal of technologies and methodologies that can enhance Duquesne Light's security and/or business continuity posture. Manages expectations and effectively communicates and collaborates with colleagues and project team members. Effectively and efficiently manage security event monitoring, tuning, and incident response. Responsible for ensuring accurate and timely resolutions to all assigned issues relating to critical infrastructure security. Monitor daily for cybersecurity events on DLC's network, and report findings to the Cybersecurity Operations Supervisor. Review endpoints to confirm compliance with endpoint security policies, procedures, and standards. Performs forensic analysis of host-based systems. Stay up to date on changes in threat landscape impacting Duquesne's information security program. Research, investigate, communicate, and integrate actionable threat intelligence information in DLC Cyber Security Operations and IT systems. Perform all other duties as assigned.

Education/ ertification: Bachelor's degree in a related discipline such as Cyber Security, Computer Forensics, or Computer Engineering required. In lieu of a Bachelor's degree, a commensurate combination of education and experience will be considered.

Preferred Experience: Previous utility experience in transmission and distribution operations, or other industries utilizing SCADA systems. Experience with the NERC CIP compliance framework and/or other regulatory frameworks governing Cybersecurity Operations. Experience participating in security and regulatory audits, including evidence gathering and analysis. Experience utilizing and managing on premise security products including Configuration Monitoring platforms, SIEM Solutions, Vulnerability Management platforms, and Endpoint Detection and Response tools. Experience with Systems Administration in server environments including Microsoft Windows and Linux Operating Systems. Experience with coding/scripting/database languages including Python, PowerShell, and SQL. Information Security certifications including CompTIA Network +, Security +, CISSP, SANS GIAC GICSP.

Skills and Abilities Utilized in this Role Include: Intermediate understanding of cybersecurity topics such as vulnerability management, incident response, endpoint protection and email security. Extensive knowledge of threats, risk analysis, and the development of security systems and protocols. Demonstrated ability to analyze unique data sets to identify and, where necessary, remediate changes to asset configurations. Proficient at technical writing and documenting procedures and processes. Strong interpersonal, communication and organizational skills with the ability to exhibit sound judgment and express verbal and written information effectively. Strong written and verbal communication and presentation skills. Demonstrated ability to interact with people and translate complex concepts into easy-to-follow ideas and present to all levels of the organization. Strong analytical and project management skills. Ability to prioritize efficiently while multi-tasking, dealing with interruptions, and working in a high paced energetic environment.

Must possess a positive attitude and strong values that fit with DLC's core values: Energized to shape the future; Bold in thinking and exploration of new possibilities; Collaborative in approaching all challenges; Responsible in commitment to safety, management of assets and finances and interaction with others; Selfless in serving the community, both on the job and through volunteerism

Scope Responsibilities are generally tactical and basic in nature; however, work may vary in type and complexity, requiring the incumbent to be flexible to adjust to the given situation. Primary focus is on daily deliverables and, outputs, while at the same time developing a knowledge of the broader context in which the work is being performed.

Decision Impact Independent discretion or decision-making capability is mostly limited. There is normally a general framework of established boundaries to help employees perform their roles and make decisions. Situations that require deviation from this general framework are typically not made alone. The employee may recommend a solution; however, the recommendations are frequently presented to their manager or more senior-level professionals for review and approval prior to the decision being made.

Hybrid Work Position follows our hybrid work model, with a minimum of two days working in the office and the remaining days working remotely. Reporting loc