Provides electric, gas, and steam services to customers in the New York City area.
Analyze threats, develop alerts, support CSOC, lead incident response, automate security tasks.
4 days ago ago
Intermediate (4-7 years)
Full Time
New York, NY
Office Full-Time
Company Size
15,000 Employees
Service Specialisms
Engineering
Consulting
Construction services
Project Management
Technical Services
Design
Turnkey
General Contractor
Sector Specialisms
Electric Utility
Gas Utility
Steam Service
Energy Transmission
Natural Gas Transmission
Electric Transmission
Regulated Utilities
Energy Delivery
Role
Description
incident response
security tools
alert tuning
threat detection
automation scripts
security projects
Enable the CSOC by developing and providing new capabilities and solutions
Lead incident responses and events
Hold seats on projects to articulate requirements and build solutions with the project teams
Create accurate documentation that provides concise explanations and conveys informative descriptions of findings, including technical explanations/walkthroughs, root causes, impact, and remediation/mitigation strategies
Perform blue and purple team functions
Correlate security events to identify threats and implement countermeasures to reduce attack surface
Manage and lead information security projects for the cybersecurity operations team
Support and, when required, lead incident response efforts and threat detection capabilities
Collaborate across the organization to build out improvement opportunities
Defines, designs, and implements strategies to protect against emerging threats using security tools
Assist the technical evaluations of contractor proposals, software, or hardware
Lead the onboarding of and training for new security tools and alerts
Implement advanced alerting and increased visibility using current and new toolsets, automation, and process
Implement & operate applicable information security plans, procedures, and control techniques designed to prevent cyber-attacks & events
Define, design, and implement strategies to protect against emerging threats using security tools
Act as advanced support and escalation for the cybersecurity operations center
Assist in preparing standards, baselines, and documents for the installation of security, infrastructure, cloud, and application technologies
Continuously perform capability enhancements with tools and processes
Stay abreast of TTPs, global security incidents, industry trends, advisories, publications, research, talks, and other relevant developments
Create new and tune existing cybersecurity alerts
Continuously implement efficiencies using current toolsets
Monitor cybersecurity threats and vulnerabilities and provide support as necessary to incident response team
Monitor, assist in troubleshooting, and perform power use functions in a variety of security tools
Assist in preparing detailed bid specifications for the installation
Provide technical expertise and support to business partners and leadership on cybersecurity threat assessments, development, testing and the implementation
Effectively communicate technical concepts to non-technical audiences
Develop scripts and tools to automate tedious processes and increase efficiency
Requirements
linux
virtualization
mitre att&ck
network architecture
security+
associate's degree
Less than 2 years Be experienced with Windows, Mac, Linux, Unix operating systems, virtualization, storage, databases, and other related systems and technologies and their respective security considerations Required
Less than 2 years Be comfortable and effective working remotely within a distributed team Required
Possesses flexibility to work in a fast paced, dynamic environment
Less than 2 years Build cooperative relationships with stakeholders throughout the organization Required
Less than 2 years Be familiar with assessment frameworks, such as MITRE ATT&CK, PTES, OSSTMM, OWASP Testing Guide, etc. Required
Demonstrated analytical skills
Must push, pull, lift up to 25 pounds
Less than 2 years Possess a thorough understanding of network architecture and design, network protocols, covert channels, encryption, and data exfiltration Required
Associate's Degree and 4 years of IT experience or
Well organized, detail oriented and flexible to handle multiple assignments
Less than 2 years Possess a detailed understanding of systems/network hardening, secure coding practices, and mitigation/remediation strategies Required
Must be available 24/7, on call, and/or participate in off-hour emergency response activities as required
Less than 2 years Leverage critical thinking and creativity; think outside the box and do not rely on tooling Required
Articulate and responsive to colleagues
Strong verbal communication and listening skills
At least 1 year in a cybersecurity role Required
Must sit or stand to use a keyboard, mouse, and computer for entire shift
Less than 2 years Effectively manage large amounts of information from complex environments and applications Required
High School Diploma/GED and 5 years of IT experience or
Less than 2 years Possess a deep understanding of general information security concepts and defensive controls, such as risk management, governance, compliance, least privilege, network monitoring, malware protection and analysis, endpoint security, DLP, intrusion detection/prevention, and SIEM systems Required
Strong written and verbal communication skills
Other: Security+, Pentest+, CySA+ 1 Year Preferred
Less than 2 years Be able to communicate to both technical and executive/business audiences Required
Less than 2 years Exemplify the companys core values and act as a role model Required
Must be able to respond to Company emergencies by performing a System Emergency Assignment to restore service to our customers.
Less than 2 years Be able to work independently and within a team Required
Bachelor's Degree and 2 years of IT experience
Benefits
Information not given or found
Training + Development
Information not given or found
Interview process
Information not given or found
Visa Sponsorship
Information not given or found
Security clearance
Information not given or found
Company
Overview
Since 1824
Year Founded
The company was established in 1824, marking the beginning of its long-standing commitment to serving New York City.
A cornerstone of New York City's energy landscape, delivering electric, gas, and steam services.
Investing in smart grid technology, clean energy solutions, and reliable infrastructure to meet modern demands.
Focused on sustainability and cutting-edge energy technologies to support a greener future for NYC.
Pioneering projects like energy storage, renewable energy integration, and sustainable energy solutions.
Ensuring the city’s vital infrastructure remains strong, with a reputation for reliability in both residential and commercial sectors.
Culture + Values
We are committed to providing excellent customer service and meeting customer needs.
We act with honesty and transparency in all interactions.
We prioritize the safety of our employees, customers, and communities.
We foster a culture of innovation and embrace new ideas to improve operations.
We aim to reduce our environmental impact through resource conservation and responsible operations.
Environment + Sustainability
2040
Net Zero Target
The company aims to achieve net zero greenhouse gas emissions by this year.
2023
Carbon Intensity Drop
Significant reduction in carbon intensity and increased renewable energy usage achieved by this year.
Invested in clean energy technologies, including solar, wind, and battery storage.
Committed to reducing carbon emissions and supporting energy efficiency programs.
Made major strides in grid modernization to enable greater renewable energy integration.
Inclusion & Diversity
25%
Women in Leadership Roles
This figure highlights the current percentage of women holding leadership positions within the organization.
The organization aims to increase the representation of women and underrepresented groups in leadership roles.
The company has set clear diversity goals for recruitment and retention.
The organization supports employee resource groups focused on various identities and backgrounds.
The company promotes equal opportunity in hiring and career development.