Lead Cybersecurity Systems Engineer Analyst

Duke Energy - Charlotte, NC

Full-time - Mid Level

Charlotte, NC

Utilities

About the position

The Analyst position at Duke Energy focuses on providing expertise in cybersecurity control implementation across various business units, including Natural Gas, Electric Generation, Transmission, and Distribution. The role involves collaborating with peers to establish and maintain a robust cybersecurity program for Operational Technology (OT) assets, emphasizing risk reduction and enhancing the cybersecurity posture of the organization.

Responsibilities

• Provide guidance and facilitate conversations between Business Units, Enterprise Partners, and Cybersecurity on leading practices to operationalize standards.
• Develop enterprise OT security strategy, vision, and objectives in collaboration with the Enterprise OT Director.
• Define, document, and report enterprise-wide cyber performance and risk metrics with Cyber Analysts.
• Conduct OT cyber assessments and work with teams to remediate deficiencies and vulnerabilities identified during assessments.
• Advise Business Units on establishing cyber programs and ongoing operations, including governance support.
• Support the development and maintenance of overarching cyber policies, standards, and control requirements.
• Maintain OT governance committees and communication paths, facilitating discussions around funding for OT cyber/compliance programs.
• Assist Business Units in maintaining asset inventories and prioritizing OT devices.

Requirements

• High School/GED degree
• Minimum 12 years of related work experience
• AS in Computer Science, Cybersecurity, or related field plus 4 years of experience
• BS in Computer Science, Cybersecurity, or related field plus 2 years of experience
• Licenses: CISA, GIAC, GCIH, CISSP, GICSP, CISM
• Strong written and verbal communication skills
• Ability to work in high-pressure situations and within a team environment
• Experience with writing and editing technical documentation and operational procedures
• Effective problem-solving and analytical skills
• Direct background or exposure to cybersecurity operations
• Knowledge of network monitoring, analysis, troubleshooting, and configuration control technologies
• General networking understanding, including TCP/IP communications and common protocols
• Demonstrated understanding of the life cycle of OT assets
• Innovative mindset with a focus on improvement and efficiency
• Commitment to training and self-study in the technical cybersecurity domain
• Strong organization and planning skills, including project coordination
• Ability to work with minimal management oversight and strong personal initiative.

Nice-to-haves

• Experience in developing effective solutions to business problems
• Demonstrated capability to manage multiple deadlines.

Benefits

• Competitive pay and benefits
• Opportunities for growth and development
• Recognition for work
• Friendly work environment