Cyber Security Systems Administrator - Cyber Security & TSOC - Akron FirstEnergy Headquarters

Cyber Security Engineer

First Energy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers' lives brighter, the environment better and our communities stronger.

First Energy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, First Energy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

About the Opportunity

This is an open position with First Energy Service Co., a subsidiary of First Energy Corp. This position's base reporting location is in Akron, Ohio, with significant flexible work location opportunities. This position is within First Energy's Cyber Security Operations and reports to the Manager of TSOC Technologies.

As a Cyber Security Engineer supporting the Transmission Security Operations Center (TSOC), you will serve as a subject matter expert for Security Information and Event Management (SIEM) platforms that enable enterprise-wide security monitoring, threat detection, and incident response. You will be responsible for the design, implementation, integration, optimization, administration, and support of SIEM technologies and associated security data pipelines. Additionally, you will work closely with cyber security operations, infrastructure, application, and business stakeholders, to develop solutions that improve security visibility, automate detection capabilities, and strengthen First Energy's cyber defense strategy.

The successful candidate will have significant hands-on experience engineering and administering enterprise SIEM platforms, including log source onboarding, use case development, correlation rule creation, platform integration, and lifecycle management. This role requires a strong engineering mindset, exceptional problem-solving skills, and the ability to architect scalable and reliable cybersecurity solutions while effectively managing projects and collaborating across multiple teams.

Responsibilities Include

• Primary responsibility will be to engineer, implement, administer, patch, maintain, and continuously improve First Energy's Security Information and Event Management (SIEM) platforms and related security monitoring capabilities.
• Assist with evaluation, design, testing, and deployment of cybersecurity technologies, including SIEM, SOAR, threat intelligence, cloud security, and other enterprise security solutions supported by the team.
• Perform platform lifecycle management, including architecture, implementation, upgrades, patching, optimization, performance tuning, and operational support.
• Develop and maintain technical standards, reference architectures, configuration baselines, integration patterns, and engineering documentation.
• Design and implement automation, orchestration, detection engineering, and response capabilities to improve security operations and incident response effectiveness.
• Perform technical activities including requirements analysis, solution design, proof-of-concept development, testing, deployment planning, and operational transition.
• Serve as a cybersecurity subject matter expert (SME), providing technical guidance and consultation to TSOC, Cybersecurity, IT, and business stakeholders.
• Collaborate with architecture, infrastructure, cloud, network, endpoint, identity, operational technology, and application teams to deliver secure, scalable, and supportable solutions.
• Participate in complex cybersecurity technology projects from requirements gathering through design, deployment, testing, operational transition, documentation, and continuous improvement.
• Work with vendors to obtain product updates, bug fixes, support engagement, and issue resolution.
• Create and maintain clear, accurate, and comprehensive technical and operational documentation.
• Support and provide technical expertise during cybersecurity incidents, including investigation, containment, recovery, and post-incident improvement activities.
• Respond to support requests that are…