| ESSENTIAL FUNCTIONS AND RESPONSIBILITIES - Run Cyber Vulnerability Assessment (CVA) periodically and review and deploy security patches.
- Monitor security events and maintain overall security posture of the Transmission OT environment.
- Prepare cyber security reports for the Transmission OT manager.
- Assure compliance with NERC Cyber Security requirements to include development and on-going administration of Transmission OT cyber security policies and procedures.
- Customize the security monitoring solutions based on requirements from users, vendor architectures to meet NERC/WECC (Western Electricity Coordinating Council) Critical Infrastructure Protection (CIP) regulations for control systems.
- Establish benchmarks for cyber security testing in conjunction with Transmission OT management and in accordance with Transmission OT CIP procedures.
- Provide technical assistance, resolve problems and client questions regarding all Tri-State supported and vendor-supplied network software and hardware used for support of the Transmission OT network and associated applications.
- Monitor, resolve and/or repair Transmission OT network hardware and software problems; schedule vendor repairs for any problems that cannot be resolved in-house.
- Perform research and investigate network operating environment developments to maintain the efficient functioning of Transmission OT computer hardware and software.
- Provide assistance in the preparation of the annual budget.
- Adhere to and demonstrate compliance with appropriate electric utility industry regulatory requirements.
- Attain knowledge and remain knowledgeable of development in regulations, laws, standards and best practices applicable to the functional area including, but not limited to, Standards of Conduct, Environmental, Employment Law, NERC Reliability Standards and Safety. Must be familiar with, and comply with, all aspects of Corporate Policy C-54, Compliance
- Because Tri-State is an electric utility with continuous service obligations to its customers, regular, reliable, and predictable performance of the essential functions and responsibilities is an essential function of the job.
- Because Tri-State has an obligation to provide continuous, reliable electric service to its customers, the ability to work overtime at any time of the day or week is considered an essential function of the job.
OTHER DUTIES AND RESPONSIBILITIES - Help with the automation of system monitoring and compliance procedures.
- Generate compliance reports related to the cyber security and event monitoring routinely.
- Work irregular hours, to include responsibility for the rotating department on-call duty requirement.
- Perform other related duties as assigned.
SUCCESS FACTORS/JOB COMPETENCIES: - Planning: Ability to think ahead and plan within timelines and resources; develop scopes, plan and schedule work; set priorities and goals; anticipate and adjust for problems; evaluate workloads; measure and evaluate performance against established goals.
- Time management: the ability to successfully plan and implement objectives within established timelines and work schedules.
- Ability to analyze problems and develop effective solutions at both strategic and functional levels.
- Technical skills in the application of principles and practices of computer science and information systems including basic computer hardware, software applications, and operating systems.
- Demonstrate behavior consistent with company values.
- Excellent interpersonal and communication skills.
- Strong team player.
- Advanced knowledge of networking concepts and network security.
REQUIRED JOB QUALIFICATIONS Education and Training - Bachelor of Science degree in Engineering, Computer Science, Business, or an equivalent combination of experience and/or education.
- Training and/or equivalent experience in the cyber Security related areas of electric utility real time systems.
Knowledge, Skills, and Ability: - Ability to apply and strong knowledge of, principles and practices of cyber security and computer science and networking concepts.
- Ability to apply principles and practices of basic computer hardware, operating systems and software applications.
- Ability to apply principles and practices of computer forensics, ethical hacking, reverse engineering and incident response.
- Ability to apply principles of network security and encryption methods.
- Ability to write code or scripts for automation
- Ability to make clear, consistent, and timely decisions.
- Ability to maintain clear and open communication with peers and customers.
- Ability to maintain cooperation and collaboration.
- Ability to work in partnership with other teams and functional areas.
- Ability to deliver high quality and innovative service to internal/external customers.
- Ability to communicate technical information to both technical and non-technical employees and others.
- Knowledge of Antivirus and Malware protection systems.
- Knowledge of Network Intrusion Detection Systems (NIDS).
- Knowledge of process control and supervisory control and data acquisition systems (SCADA).
- Knowledge of operating systems security policies and logging mechanisms and local firewalls.
- Knowledge of operating systems advanced security tools such as Security Enhanced Linux (SE Linux).
- Knowledge of change management and configuration management principles.
Experience: - Eight (8) or more years of Information Technology (IT) or Operation Technology (OT) experience or equivalent experience
- Windows Server and Active Directory
- LINUX Systems
- Virtualization technologies (VMWare and Hyper-V)
- Working knowledge of Tripwire
- Experience with Splunk
- Administration of Nessus and RSA
- Administration of Ivanti
- Security and networking tools such as Nagios, Cyberark, etc.
Other: - Hold one or more of the recognized cyber security certificates or equivalent experience.
- Willingness to travel as needed for meetings, conferences and training. (Must possess a valid driver's license.)
- Must be able to demonstrate that he/she can perform all of the essential functions of the position.
DESIRED JOB QUALIFICATIONS Note:The above requirements describe the experience and education qualifications for the Senior Transmission OT Cyber Security Analyst. Those with less experience will be hired at the Transmission OT Cyber Security Analyst I, II or III job grade level, as appropriate. PHYSICAL AND MENTAL DEMANDS: The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Physical demands: While performing the duties of this position, the incumbent is primarily required to sit, stand, walk, stoop, and bend. Specific vision abilities include close vision, peripheral vision, depth perception and the ability to adjust focus. Mental demands: While performing the duties of this position, the incumbent is required to read, write, analyze data and reports, exercise judgment, develop plans, procedures and goals, direct/supervise others, present information to others and work under pressure. Work Environment: While performing the duties of this position, the incumbent is exposed to moderate level of noise. Majority of duties are performed indoors primarily at a desk. |
