Cybersecurity Threat & Vulnerability Analyst – Intern​/Co-op Conversion

• Identify, analyze, prioritize, and eradicate cyber threats and vulnerabilities across the Duke Energy environment
• Analyze threat information and disseminate it to appropriate parties for action
• Collaborate with peers, internal and external teams, and management
• Support tools for vulnerability scanning, configuration monitoring, and Open Source Intelligence analysis
• Follow processes and procedures defined by Cybersecurity leadership and the Threat & Vulnerability Management team

• Bachelor's degree in Cybersecurity, Information Technology, or a related field
• Duke Energy internship or co-op experience
• Experience researching and assessing cyber threats and vulnerabilities
• Knowledge of attack methods and techniques, including DDoS, brute force, and spoofing
• Knowledge of cyber intelligence and information collection capabilities and repositories
• Knowledge of cybersecurity domains, security practices, Cyber Kill Chain methodology, and MITRE ATT&CK Framework
• Knowledge of telecommunications fundamentals, networking, and routing
• Understanding of TCP/IP communications and network-level DNS, HTTP, and SMB protocols and applications
• Knowledge of intelligence disciplines and internal tactics to anticipate or emulate threat capabilities and actions
• Ability to utilize multiple intelligence sources across intelligence disciplines
• Windows and UNIX/Linux command-line scripting and programming experience, including Python and Power Shell
• Strong written and verbal communication skills
• Ability to create complex technical reports and provide briefings to staff and management
• Ability to work effectively in a dynamic, fast-paced environment
• Ability to research independently, multitask, and meet tight deadlines
• Ability to develop and maintain relationships with internal and external business partners
• Experience writing and editing technical documentation and operational procedures
• Experience developing and improving work processes
• Effective problem-solving and analytical skills
• Knowledge of Duke Energy's cybersecurity policies
• Commitment to training, self-study, and maintaining technical cybersecurity proficiency
• Ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future

Demonstrates expertise in identifying and mitigating cyber threats and vulnerabilities, utilizing knowledge of cybersecurity frameworks such as MITRE ATT&CK and Cyber Kill Chain. Proficient in technical report writing and effective communication with stakeholders.

• Cybersecurity Degree
• Threat Analysis
• Vulnerability Management
• Python Programming
• Technical Documentation

• Cyber Threat Research
• Vulnerability Scanning
• DDoS Attack Knowledge
• TCP/IP Communications
• UNIX/Linux Scripting
• Power Shell Scripting
• Cyber Kill Chain Methodology
• MITRE ATT&CK Framework
• Networking Fundamentals
• Technical Report Writing

• Strong Communication Skills
• Problem-Solving Skills
• Analytical Skills
• Relationship Building
• Multitasking Ability

• Cybersecurity Policies
• Threat Intelligence
• Information Technology
• Telecommunications Fundamentals
• Internal Tactics

• Vulnerability Scanning Tools
• Configuration Monitoring Tools
• Open Source Intelligence Tools