Senior Cybersecurity Analyst

Artesian Water Company

Full-time - Senior

Utilities

About the position

The Senior Cybersecurity Analyst is responsible for ensuring the security and integrity of the company's computer-related equipment and networks. This role requires deep expertise in cybersecurity frameworks, threat detection, incident response, and vulnerability management within a hybrid IT/OT environment. The analyst will monitor the evolving threat landscape, ensure compliance with security policies, and respond to technology-based threats proactively and reactively.

Responsibilities

• Plan and develop security posture.
• Administer a security portfolio supporting authentication, authorization, domain services, auditing, logging, and security for various devices.
• Anticipate and identify security needs, implementing new processes and enhancements.
• Administer, maintain, and implement security monitoring tools across the enterprise.
• Propose policies and procedures to proactively address threats and findings from monitoring activities.
• Monitor security requirements and compliance across technology systems throughout their lifecycle.
• Assure the use of approved methodologies for security initiatives.
• Monitor and maintain success criteria metrics for all security initiatives.
• Administer the organization's penetration and vulnerability assessment program and audits.
• Administer training on information security and cybersecurity awareness.
• Implement and maintain networking and cybersecurity-related equipment and services.
• Develop and administer solutions to monitor compliance with security policies and objectives.
• Conduct regular vulnerability assessments to identify cybersecurity gaps.
• Analyze logs from various sources to detect and respond to security events.
• Develop and refine SIEM rules to improve detection accuracy.
• Perform proactive threat hunting to identify potential threats.
• Participate in efforts to ensure the organization's ability to recover from security risk events.
• Monitor and respond to cybersecurity-related alerts from internal and third-party sources.
• Assure the development of a roadmap and lifecycle for the security portfolio.
• Propose and execute projects according to strategic imperatives.
• Ensure compliance with policies, guidelines, and regulations.
• Develop and lead internal/external security risk assessment processes.
• Evaluate proposed purchases and changes to ensure security requirements are included.
• Administer periodic cybersecurity assessments for vendors.
• Monitor and enforce segregation of duties within the technology stack.
• Prepare responses to audit and security assessments.
• Implement approved audit recommendations.
• Develop and track plans of actions for identified vulnerabilities.
• Ensure adherence to contractual obligations and best practices.
• Negotiate favorable business terms during contract discussions.
• Implement redundancy in applications and services.
• Participate in the review and enhancement of the Incident Response Plan.

Requirements

• Bachelor's Degree in Computer Science, Information Technology, or related discipline.
• Minimum five years of experience in technology security or equivalent education and experience.
• Professional certifications such as CISSP, CEH, or equivalent.
• Working knowledge of security, networking, and technology infrastructure concepts.
• Knowledgeable in Linux, Windows server and desktop OS, Active Directory, virtualization platforms, and databases.

Nice-to-haves

• Experience leading the design and implementation of technology security initiatives.
• Experience managing compliance with policies and regulatory requirements.
• Strong time and risk management skills.
• Independent production and complex problem-solving abilities.

Benefits

• Health insurance
• 401k retirement plan
• Professional development opportunities
• Flexible scheduling options