Cyber Security Analyst CyberArk

Public Service Enterprise Group - Newark, NJ

Full-time - Senior

Remote - Newark, NJ

10,001+ employees

Utilities

About the position

This position is an experienced, senior level, hands-on technical lead, performing privileged access management (PAM) security functions and maintaining PAM systems, while providing technical guidance to the team. The role involves managing PAM technologies, as well as PAM security policies and procedures, and incident response as needed. The individual will provide technical expertise and support to IT management and staff in conducting cybersecurity threat risk assessments, developing, testing, and implementing appropriate information security plans, procedures, and control techniques designed to prevent, minimize, or quickly recover from cyber-attacks or other serious events. The responsibilities include leading and managing PAM technologies, providing technical expertise in threat/risk assessments related to privileged access, defining, designing, and implementing strategies to protect against emerging threats using PAM tools, responding to security incidents as needed, and performing security reviews on new PAM technologies and changes to existing technologies. The individual will also manage information privileged access management technologies, ensuring that the organization is well-protected against potential security threats. This role is critical in ensuring the integrity and security of the organization's information systems, and it requires a strong understanding of cybersecurity principles, as well as the ability to communicate effectively with both technical and non-technical stakeholders. The position offers a unique opportunity to work in a dynamic environment focused on clean energy technology and diversity, equity, and inclusion, making it an exciting time to join PSEG.

Responsibilities

• Leads and manages PAM technologies
• Provides technical expertise in threat/risk assessments related to privileged access
• Defines, designs, and implements strategies to protect against emerging threats using PAM tools
• Responds to security incidents as needed
• Performs security reviews on new PAM technologies and changes to existing technologies
• Manages information privileged access management technologies.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cyber Security, Math or Engineering and a minimum of 4 years of experience in Information Security; In lieu of a degree, 8 years of experience in Information Security.
• Experience providing technical PAM expertise to IT management and staff in cybersecurity threat risk assessments, development, testing, and the implementation and operation of appropriate information security plans, procedures, and control techniques designed to prevent, minimize or quickly recover from cyber-attacks or other serious events.
• Strong Identity and Access Management (IAM) and PAM experience.
• Proficient in defining processes and procedures for PAM.
• Ability to follow cybersecurity news and alerts, understand complex attack vectors and risks, and identify and evaluate emergent cybersecurity threats and vulnerabilities.
• Demonstrated ability to recommend appropriate corrective actions for information security incidents and provide risk mitigation recommendations to management and team.
• Experience with designing process flows to be implemented in security automation tools to automatically respond to threats quickly and effectively.
• Experience with reviewing complex IAM architecture design diagrams and documents for new technologies and changes to existing technologies to determine risks and provide recommendations and mitigations.
• Ability to work independently with little or no supervision.
• Strong verbal and written communication skills.
• Strong leadership, technical teamwork, and interpersonal skills.
• Ability and willingness to work in a strong team environment, constantly teaching and learning from other team members.
• Ability to foster working relationships with the team, IT Management, and Client departments.
• Ability to explain technical concepts to business users in the context of business requirements.
• Technical experience including: information/data/network/computer security design, administration and/or assessment.
• Broad knowledge of information systems including Windows security, network security, systems development, communication networks, security software/hardware, and operating systems.
• Experience with key information security technologies such as SIEM, firewalls, intrusion detection/prevention systems, vulnerability assessment, encryption, identity and access control systems, anti-malware, and security event analysis.
• Strong organizational, managerial, and financial management skills.
• Ability to communicate effectively with both technical and non-technical individuals.
• Strong planning skills and results-oriented.

Nice-to-haves

• ISC2 Certified Information Systems Security Professional (CISSP) or equivalent
• Programming Experience in Python

Benefits

• Comprehensive health-related benefits including medical, vision, dental, and well-being and behavioral health programs
• 401(k) with company match
• Company paid life insurance
• Tuition reimbursement
• Minimum of 18 days of paid time off per year