Cyber Threat Analyst - Cyber Security & TSOC

• Understanding programming/scripting code (Python, Power Shell, Bash. C#)

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger.

First Energy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, First Energy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

This position’s base reporting location is in Akron, Ohio, and reports to the Supervisor of Threat Hunting.

This position’s base reporting location is in Akron, Ohio, and reports to the Supervisor of Threat Hunting.

• Proactively search for and identify vulnerabilities in the organization’s security systems
• Collaborate with the SOCs to convert intelligence into actionable defensive capabilities
• Evaluate intelligence sources and feeds for relevance, accuracy, timeliness, and operational value to reduce unnecessary alerting and noise
• Analyze threat actors' TTPs (Tactics, Techniques, and Procedures) to provide detailed technical reports with a high level of attention to detail for stakeholders, as well as assist in developing related content
• Analyze threat reporting from commercial intelligence platforms, OSINT, government advisories, ISACs, and trusted industry partner
• Research and enrich IOCs, including domains, IP addresses, URLs, file hashes, certificates, and adversary infrastructure
• Monitor geopolitical events, vulnerabilities, cybercriminal activity, and nation-state campaigns for potential organizational impact
• Act as a cybersecurity subject matter expert (SME) to support the SOC, providing consultancy and advice on the delivery of security solutions
• Maintain a high level of expertise in log analysis, malware reverse engineering, memory forensics, network and endpoint telemetry, and behavioral analytics
• Assist with incident response for operational and cybersecurity related issues
• Identify process improvements to further advance security operations
• Improve detections in SIEM, EDR, and SOAR platforms by fine-tuning existing content and developing new custom rules and alerts
• Re-evaluate current controls and make recommendations for best practices based on new information received in an ever-evolving threat landscape
• Research new capabilities from both open and closed sourced technologies to find opportunities to enhance the Security Operation Center (SOC) ecosystem
• Participate with cross-functional team members in issue identification, process impacts and solution development for cybersecurity projects and initiatives
• Educate and influence IT, Cyber Security and Business stakeholders to better understand existing security risks, best practices, and infrastructure designs/changes required to support business and IT strategies securely
• Champions FE’s Core Values & Behaviors, through coaching and by personal example
• Assist with metrics, reporting, and other SOC communications
• Process and share information with other First Energy security teams

• Bachelor's degree in computer science, Information Security, or similar discipline is required with 1 to 3 years of experience
• Industry standard certifications will be considered such as OSCP, GIAC (GCTI, GCIH, GREM, GCFA), CISSP and HTB CPTS
• A bachelor's degree in another field with 4 years relevant industry experience in cyber/information security will be considered
• In lieu of a degree, 3 years of related experience is required
• Related experience includes…