Cybersecurity Analyst I or II

Job Description

Job Specifications

We are not an E-verify employer and are not able to assist with the requirements of the following programs:  work visas specific to their current employer (example: H1-B, O-1 etc.) or with work authorization issued pursuant to their student visa (example: F-1, J-1, M-1 etc.) or with work authorization issued pursuant to their spouse visa (Example: L1 EAD, H4 EAD etc.)

Black Hills Energy is people powered and purpose driven. Our team uses the power of energy to improve life for over one million customers in 800+ communities across the West and Midwest. We seek talented, caring people who embody our core values and contribute to a culture of inclusion and growth. As an organization, we believe the best part of working on our team is our commitment to making tomorrow better than today—for our customers, communities and each other.

Position summary:

Are you looking for more than 'just' a job? Are you on a quest for a cybersecurity mission that matters? Do you enjoy hacking the matrix, solving wicked-hard problems, working with highly skilled cybersecurity ninjas and cool tech that our society depends on? We are seeking cybersecurity/infosec analysts who are tech-savvy, eager to learn, self-motivated and are comfortable working as a team and independently. In this role, you will work with other professionals in information security roles as well as cross-functional IT and operational business units. Your work will directly safeguard the critical infrastructure that the lives and safety of millions of customers, residents and business depend on 24/7/365 throughout eight states on behalf of Black Hills Energy, a publicly traded utility and energy company. Cybersecurity Analysts are key members of the Enterprise Cybersecurity team. Your skills and experience enable the products and services that help our company meet regulatory obligations and general business security requirements. Cyber Analysts will be trained, guided and empowered to accomplish critical cybersecurity tasks, while working with other business teams to implement and enhance measures that achieve our mission of defending our company, our customers and our partners.

Pay Range: This posting includes the full pay range for this position. Pay is based on a number of factors and may vary depending on job-related knowledge, skills, experience, and internal equity.

Cyber Security Analyst I: $28.05 - $42.12 per hour

Cyber Security Analyst II: $84,600 - $126,900 

Reporting Relationship: Manager Security Operations

Location: Rapid City, South Dakota 

Relocation Assistance: Relocation assistance is available based on individual circumstances! Details to be shared during the offer process. 

Essential Functions:

• Function as a primary and/or supporting cyber analyst responsible for tasks, products and capabilities such as: cyber threat intelligence (CTI); event analysis and forensic investigations; incident response (IR); vulnerability management (vuln mgmt); network, end-point, email, app, etc security; anti-malware; intrusion detection/prevention systems (IDS/IPS); operational technology (OT) / industrial control systems (ICS); firewalls (NG/FWs); logging and monitoring systems (SIEM/SOAR) and/or other relevant duties/tools.
• Partner in the development, testing, documentation and implementation of security plans, products and control techniques.
• Participate in the evaluation of vendor proposals, conduct process analysis, review information security architectures and recommend modifications to enhance security resiliency, reduce costs and improve services/functionality.
• Track projects/metrics and communicate status to management and/or other partners.
• Maintain an awareness of existing and proposed security standard setting groups, State and Federal legislation and regulations pertaining to relevant cybersecurity considerations/requirements.
• Attend meetings with other business units to ensure the right solutions are implemented with regards to security functionality, policy and procedures.
• After completing appropriate training, participate in rotating on-call with the Security Team for critical issues requiring event analysis, incident response and/or after-hours management attention.

Additional Responsibilities:

• Perform system audits, user audits and network audits on a scheduled or as needed basis.
• Help ensure the company meets compliance standards for all applicable regulations, including NERC-CIP, TSA, SOX, NACHA, CMMC, etc.
• Assist in developing communication campaigns to improve information security training and awareness across the company.

What Is Required:

Cyber Security Analyst I:

• Associate's degree in Computer Science, Information Systems, Information/Cyber Security or related fields; or equivalent combination of education and experience.
• Minimum of one year of experience in relevant IT role/s i.e System Administration, Network Operations, Cyber/Information Security and/or other relevant experience.
• Experience with Windows and/or Linux Endpoint / Server operating systems and Active Directory administration.
• Strong organizational skills, attention to detail, and ability to manage multiple responsibilities while meeting deadline demands.
• Working knowledge of one or more of: Windows Server OS, UNIX/Linux OS, firewall or NextGen Firewalls, IDS/IPS products, vulnerability assessment and management products, networks (routing, switching, design, etc.), scripting/programming (Python, PowerShell, etc.), and / or other relevant cybersecurity skills.
• Excellent verbal and written communication skills with the ability to communicate with both technical and non-technical people.
• Able to work with minimal supervision, handle multiple projects simultaneously, assist with coordinating a variety of work functions and adapt to critical timelines.
• Ability to handle confidential and proprietary information with the utmost of discretion and be eligible for or have a current/active US Government security clearance.

Cyber Security Analyst II:

• Bachelor's degree in Computer Science, Information Systems, Information Security or related field or equivalent combination of education and experience
• Minimum of three years of experience in System Administration, Network Design, Cybersecurity / Information Security or other relevant experience is required.
• Minimum of three years of experience with relevant and various specialized cybersecurity-related applications, processes and/or systems is required.
• Minimum of two years of experience with Windows and/or Linux Endpoint / Server operating systems and Active Directory administration is required.
• Strong understanding of network architecture, firewalls, Intrusion Detection Systems, web filtering, audit and log management, physical security control systems, real-time systems, and common operating systems.
• Solid knowledge cyber security theory and practice as promoted by security standards and certification entities.
• Understanding of one or more technical security topics such as Security Essentials; Ethical hacking; Auditing and monitoring networks, systems, and users; forensics and malware analysis; security incident response.
• Experience with firewalls, IDS/IPS products, vulnerability assessment and management products, Windows operating systems, UNIX/Linux operating systems, networks (routing, switching, design, etc.), scripting/programming (Python, shell, Perl, C, etc).
• Excellent organizational skills with attention to detail, accuracy and timeliness.
• Able to work with minimal supervision, handle multiple projects simultaneously, assist with coordinating a variety of work functions and adapt to critical timelines.
• Ability to handle confidential and proprietary information with the utmost of discretion and be eligible for or have a current/active US Government security clearance.

What Is Desired:

• General understanding of electric and gas control systems (e.g. OT/ICS/SCADA/HMIs).
• Understanding of IT Security, Risk, Compliance and regulations related to the company's IT policies and procedures.
   

This description is not intended to be an all-inclusive list of responsibilities, duties, and requirements for employees in this position. Job descriptions may and do change periodically. Where positions are covered by a collective bargaining unit agreement, the terms and conditions of the agreement will apply.

About our Company: We are a customer, growth and safety focused utility company that is dedicated to our communities. We improve life with energy as an energy partner of choice. Our diverse culture fuels unique perspectives, opening doors to new insights and possibilities. Based in Rapid City, South Dakota, we have over 3000 employees and serve 1.3 million natural gas and electric utility customers across eight states (South Dakota, Montana, Wyoming, Colorado, Nebraska, Iowa, Kansas, and Arkansas).

Enjoy our Comprehensive Benefits Package!  Annual discretionary bonuses, 401(k) (6% company match and up to 9% company retirement contribution), tuition reimbursement, generous paid time off benefits, including paid holidays and parental leave, company paid life insurance and disability benefits (short and long term), an employee assistance program and well-being benefits, and competitive medical, dental and vision insurance.

Candidates must successfully pass a pre-employment drug screen and background check. 

Black Hills Energy does not sponsor applicants for work visas. All applicants must be legally authorized to work in the US.

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran.  If you require reasonable accommodation, please visit  careers.blackhillsenergy.com for more information.