Cybersecurity Administrator

About NAES

At NAES, you’ll find engaging and challenging career opportunities in the power generation, renewable energy and industrial construction industry. At every level of the company, we share a common goal: To instill confidence in our clients through our steadfast commitment to safety, integrity and quality of work.

NAES is largest independent operator of power facilities in the industry, operating more than 190 power plants throughout the United States, Canada, Mexico and the UK that span all technologies and provide over 49 GW of capacity. With the strength of 4000 people, our growing family of companies now addresses the entire life cycle of power generation and other industrial plants.

Summary

The Cybersecurity Administrator is responsible for maintaining the security posture of NAES by administering the Cybersecurity systems while monitoring, detecting, and responding to security incidents and threats.  Investigate alerts, analyze the impact, and coordinate the appropriate response.  Assist in identifying, assessing, and prioritizing vulnerabilities within NAES.

Primary Duties

• Administer Cybersecurity Systems: maintain and/or make changes to the Cybersecurity systems of NAES Corporation under the direction of the Cybersecurity manager.
• Monitor Cybersecurity Systems: Continuously monitor security alerts and logs from various security tools and systems to identify potential threats and vulnerabilities.
• Incident Response: Respond to security incidents by investigating alerts, analyzing the impact, and coordinating the appropriate response actions to mitigate risks.
• Threat Analysis: Conduct threat intelligence analysis to understand emerging threats and vulnerabilities and recommend measures to enhance security.
• Incident Management: Investigate security breaches and incidents, conducting root cause analysis and implementing corrective actions to prevent future occurrences.
• Vulnerability Management: Assist in identifying, assessing, and prioritizing vulnerabilities within the organization's systems and applications, and support remediation efforts.
• Collaboration: Work closely with IT, compliance, and other departments to ensure a unified approach to security and to address any security-related concerns.
• Documentation and Reporting: Maintain detailed documentation of security incidents, investigations, and responses, and provide regular reports to management on security metrics and trends.
• Security Policy Enforcement: Help develop and enforce security policies, procedures, and best practices to ensure compliance with industry standards and regulations.
• Training and Awareness: Participate and help facilitate security awareness training programs for employees to promote a culture of security within the organization.

Working Relationships

The Cyber Security Administrator reports to the Cybersecurity Manager. Contact is normally made with others inside and outside of the company, including other departments, customers, immediate associates, and own supervisor.

Compensation 

The initial salary range is $86,800 to $99,850 based on experience and qualifications.

Education and Experience:

• Education: Bachelor’s Degree in Information Security with 2-3 years of security related experience; or related field with 5 years of equivalent experience
• Years of Experience: Three years of cybersecurity experience.
• Licenses/Certification: CompTIA Security+, Microsoft Security Certified, and/or CISSP

Specific Skills and Knowledge

• Administration of Cybersecurity Systems – Familiarity of navigating and configuring Cybersecurity systems such as MDR portals, EDR portals, VMs, Networks, VLANs, Azure portal, Microsoft Security Portal, etc.
• Incident Response - Ability to respond to security incidents, including identification, containment, eradication, and recovery.
• Threat Detection and Analysis - Proficiency in using security information and event management (SIEM) tools to analyze logs and detect anomalies. Knowledge of threat intelligence sources and how to apply them to identify potential threats.
• Vulnerability Management - Skills in conducting vulnerability assessments and penetration testing. Familiarity with tools for scanning and remediating vulnerabilities.
• Malware Analysis - Knowledge of malware types, behaviors, and analysis techniques. Ability to analyze and respond to malware incidents.
• Security Tools and Technologies - Proficiency in using various security tools, such as antivirus software, endpoint detection and response (EDR) solutions, and data loss prevention (DLP) tools.
• Security Frameworks and Standards - Familiarity with security frameworks (e.g., CIS, NIST, ISO 27001) and compliance regulations (e.g. JSOX). Understanding of best practices for security governance and risk management.
• Understanding of cloud security principles and practices, especially in platform for Microsoft Azure.
• Forensics and Investigation - Skills in digital forensics and evidence collection. Knowledge of investigation techniques and tools for analyzing security incidents.
• Ability to communicate effectively with technical and non-technical stakeholders. Skills in documenting incidents, creating reports, and presenting findings.
• Analytical Thinking - Strong problem-solving skills to analyze complex security issues and develop effective solutions.
• Attention to Detail - Ability to notice subtle changes or anomalies in data that may indicate security threats.
• Team Collaboration - Skills in working collaboratively with other IT and security teams to enhance overall security posture.
• Continuous Learning - Commitment to staying updated on the latest security trends, threats, and technologies through ongoing education and training.

It is desirable, but not required to have exposure to the following:

• Scripting and Automation
• Cloud Security Knowledge
• Security Architecture Understanding
• Compliance and Regulatory Knowledge
• Risk Management Skills
• Advanced Threat Hunting
• Public Speaking and Presentation Skills

Physical Requirements and Working Conditions

Normal works hours are 8:00a.m. to 5:00p.m. Monday through Friday. Additional time may be required during heavy workloads or to meet deadlines.

Physical Requirements: Ability to sit for long periods of time, ability to communicate verbally, and in writing, and ability to handle long periods of screen time.

Fitness for Duty

All employees will participate in the Fitness for Duty Program. This program includes a pre-employment drug screen and post-employment random drug screening.

NAES Safe

Safety is a core value of NAES and as a condition of employment, all employees are expected to be mentally alert and work safely at all times.  Additionally, employees are required to adhere to all safety warnings and posted safety signs whenever on company property.  Furthermore, employees must follow all NAES safety rules and procedures.  Effectiveness in carrying out this responsibility is part of the evaluation of each employee’s performance.

NAES is committed to a diverse and inclusive workplace. It is the practice of NAES to seek employees of the highest quality and to select individuals on the basis of merit and competence, without regard to race, color, religion, national origin, gender, gender identity, sexual orientation, age, disability, military status or affiliation protected under USERRA, or any other basis of discrimination prohibited by applicable local, state and federal law.

Qualifications Skills Preferred Information Technology Security Intermediate Network Security Intermediate Organizational Skills Advanced Verbal and Written Communications Intermediate SOC Analysis Intermediate Microsoft Defender XDR Adm Intermediate Zscaler Administration Intermediate Cloud Security Intermediate JSOX Intermediate MDR Portals Intermediate EDR Portals Intermediate VLAN Intermediate Azure Portal Intermediate Microsoft Security Portal Intermediate Risk Management Intermediate Advanced Threat Hunting Intermediate Security Analysis Intermediate Scripting Intermediate Automation Intermediate Presentations Intermediate Public Speaking Intermediate Compliance Intermediate Regulatory Intermediate Incident Response Intermediate Threat Detection Intermediate Analysis Intermediate Malware Analysis Intermediate Behaviors Preferred Detail Oriented: Capable of carrying out a given task with all details necessary to get the task done well Innovative: Consistently introduces new ideas and demonstrates original thinking Team Player: Works well as a member of a group Education Preferred Bachelors or better. Experience Preferred Cybersecurity experience. Administration of Cybersecurity Systems – Familiarity of navigating and configuring Cybersecurity systems such as MDR portals, EDR portals, VMs, Networks, VLANs, Azure portal, Microsoft Security Portal, etc. Incident Response - Ability to respond to security incidents, including identification, containment, eradication, and recovery. Threat Detection and Analysis - Proficiency in using security information and event management (SIEM) tools to analyze logs and detect anomalies. Knowledge of threat intelligence sources and how to apply them to identify potential threats. Vulnerability Management - Skills in conducting vulnerability assessments and penetration testing. Familiarity with tools for scanning and remediating vulnerabilities. Malware Analysis - Knowledge of malware types, behaviors, and analysis techniques. Ability to analyze and respond to malware incidents. Security Tools and Technologies - Proficiency in using various security tools, such as antivirus software, endpoint detection and response (EDR) solutions, and data loss prevention (DLP) tools. Security Frameworks and Standards - Familiarity with security frameworks (e.g., CIS, NIST, ISO 27001) and compliance regulations (e.g. JSOX). Understanding of best practices for security governance and risk management. Understanding of cloud security principles and practices, especially in platform for Microsoft Azure. Forensics and Investigation - Skills in digital forensics and evidence collection. Knowledge of investigation techniques and tools for analyzing security incidents. Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.