Cyber Security Systems Administrator - Cyber Security & TSOC - Akron FirstEnergy Headquarters
FirstEnergy
- Location
- Akron, OH
- Job type
- Full time
- Posted
- Oct 5
- 15 days ago
Career path
See where this role leads
Jigup maps the next three moves from a job like this one, with the titles and the skills each step asks for.
About the company
FirstEnergy
Utilities · 10,001+ employees
We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger. FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.
What you'll do
- Primary responsibility will be to engineer, implement, administer, patch, maintain, and continuously improve FirstEnergy's Security Information and Event Management (SIEM) platforms and related security monitoring capabilities.
- Assist with evaluation, design, testing, and deployment of cybersecurity technologies, including SIEM, SOAR, threat intelligence, cloud security, and other enterprise security solutions supported by the team.
- Perform platform lifecycle management, including architecture, implementation, upgrades, patching, optimization, performance tuning, and operational support.
- Develop and maintain technical standards, reference architectures, configuration baselines, integration patterns, and engineering documentation.
- Design and implement automation, orchestration, detection engineering, and response capabilities to improve security operations and incident response effectiveness.
- Perform technical activities including requirements analysis, solution design, proof-of-concept development, testing, deployment planning, and operational transition.
- Serve as a cybersecurity subject matter expert (SME), providing technical guidance and consultation to TSOC, Cybersecurity, IT, and business stakeholders.
- Collaborate with architecture, infrastructure, cloud, network, endpoint, identity, operational technology, and application teams to deliver secure, scalable, and supportable solutions.
- Participate in complex cybersecurity technology projects from requirements gathering through design, deployment, testing, operational transition, documentation, and continuous improvement.
- Work with vendors to obtain product updates, bug fixes, support engagement, and issue resolution.
- Create and maintain clear, accurate, and comprehensive technical and operational documentation.
- Support and provide technical expertise during cybersecurity incidents, including investigation, containment, recovery, and post-incident improvement activities.
- Respond to support requests that are escalated to the team.
- Participate in an On-Call rotation to support after-hours operational issues and cybersecurity incidents.
- Ensure compliance with applicable corporate policies, regulatory requirements, and cybersecurity standards.
- A bachelor’s degree in Cybersecurity, Computer Science, Cyber Analytics or similar discipline is preferred. A bachelor’s degree in another field with relevant industry experience in cyber/information security will be considered.
- Working knowledge and/or experience in engineering, administering, and maintaining enterprise SIEM platforms, including configuring integrations upstream and downstream for ingestion and correlation activities.
- Experience developing, maintaining, and troubleshooting scripts in Linux and/or Windows environments to automate administrative and operational tasks.
- Knowledge of operating systems internals, hardening, and monitoring (Windows and UNIX).
- Experience in designing, deploying, and/or supporting enterprise-scale security solutions.
- Experience in IT systems and/or networking infrastructure is required.
- In-depth understanding of TCP/IP network fundamentals is required.
- Strong troubleshooting skills are required.
- Must compose well-written, professional documents and reports.
- Effective business communication skills which include documentation and project status communication.
- Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain, etc. are a plus
- Experience with Compliance regulations, such as NERC CIP, is a plus.
What you need
- Working knowledge and/or experience engineering and maintaining enterprise SIEM platforms
- Experience developing, maintaining, and troubleshooting scripts in Linux and/or Windows
- Knowledge of operating systems internals, hardening, and monitoring
- Experience in IT systems and/or networking infrastructure
- In-depth understanding of TCP/IP network fundamentals
- Strong troubleshooting skills
- A bachelor's degree in a related discipline (preferred)
- Knowledge of NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, or Cyber Kill Chain (preferred)
Key skills
Keywords for your resumePro
The words this employer's screening is likely to look for.
This job lists resume keywords
The terms this posting uses, pulled out so you can mirror them in your resume. Jigup Pro members see the list on the job board.
Perks
- company-sponsored pension plan
- 401(k) savings plan
- medical
- prescription drug
- dental
- vision
- life insurance
- tuition reimbursement
See full description on company page, apply now