Cyber Security Analyst II

New Jersey Resources - Wall Township, NJ

Full-time - Mid Level

Wall Township, NJ

501-1,000 employees

Utilities

About the position

As a Cyber Security Analyst II at New Jersey Resources, you will play a crucial role in safeguarding our information systems assets. Your primary responsibility will be to ensure the safety and integrity of our networks and systems against intentional or inadvertent threats. You will be part of our Industrial Control Systems (ICS) cyber security team, where you will monitor the organization's networks for security breaches and ensure compliance with company security policies. This position requires a proactive approach to cyber security, including the configuration and daily maintenance of security tools, updating antivirus and malware platforms, and responding to security alerts. In this role, you will also be responsible for implementing Identity Access Management (IAM) procedures and policies, providing system-level logs for potential security investigations, and conducting regular assessments to identify vulnerabilities before they can be exploited. You will assist in the development and periodic review of security procedures, ensuring that systems and software configurations comply with information security requirements, policies, and standards. Additionally, you will support the implementation of information security-related projects and promote security awareness across the organization. Your duties will include producing regular Key Performance Indicator (KPI) and status reports, interfacing with multiple vendors and contractors, participating in risk assessments, and identifying and prioritizing security patches. You will also be responsible for detecting, identifying, and classifying security incidents while maintaining comprehensive security documentation. Collaboration with the security architect will be essential for obtaining technical guidance and assistance with security operations. This position may require occasional travel for training, conferences, and disaster recovery or offsite equipment support, as well as on-call support 24/7 with a 30-minute response time as needed.

Responsibilities

• Monitor the organization's networks for security breaches and ensure compliance with company security policies.
• Responsible for cyber security tool configuration, daily maintenance, and monitoring of security tools.
• Update antivirus/malware platforms and respond to security alerts and other information security measures.
• Ensure Identity Access Management (IAM) procedures and policies are implemented and adhered to.
• Provide system-level logs and details related to potential security investigations.
• Conduct regular assessments across systems to identify vulnerabilities before they can be exploited.
• Ensure users understand and adhere to necessary procedures to maintain cyber security.
• Assist in the development and periodic review of security procedures.
• Ensure systems and software configurations comply with information security requirements, policies, and standards.
• Assist and support in the implementation of information security-related projects.
• Promote security awareness within the organization.
• Produce regular KPI and status reports.
• Interface with multiple vendors and contractors as required.
• Participate in risk assessments as required.
• Identify and prioritize security patches and report on compliance.
• Detect, identify, and classify security incidents; maintain security documentation.
• Work closely with the security architect for technical guidance and assistance with security operations.

Requirements

• Bachelor's degree in cyber security or a related field plus a minimum of two years of experience with the configuration and monitoring of information security platforms such as SIEM, IDS/IPS, anti-malware, encryption, vulnerability testing, firewalls, web proxies, patch management, logging/auditing, and IAM systems; or equivalent work experience.
• Knowledge and experience with computer networking as well as ICS security.
• ISC2 CISSP Certificate preferred.
• Working knowledge of system security design processes, risk management, contingency planning, change management, auditing, and security testing.
• Positive, cooperative, self-motivated, courteous, and professional attitude.
• Demonstrated interpersonal skills including effective verbal and written communications; ability to work effectively with others.

Nice-to-haves

• Experience with security information event management (SIEM) systems.
• Familiarity with intrusion detection/prevention systems (IDS/IPS).
• Knowledge of encryption technologies and vulnerability testing tools.

Benefits

• Flexible work schedules
• Opportunities for growth and development
• Competitive pay and benefits