Cyber Security Analyst, Security Operations

Cyber Security Specialist

Join Tampa Electric and build a rewarding career with competitive pay, comprehensive benefits, and a culture that supports your growth. Your potential finds its purpose at Tampa Electric. We proudly deliver 99.98% electric service reliability to nearly 860,000 customers across 2,000 square miles of Hillsborough County and parts of Polk, Pasco and Pinellas counties. Through innovation and strategic investments, we're creating a cleaner, brighter energy future—while delivering exceptional service every step of the way.

The Cyber Security Specialist Associate is responsible for assisting with monitoring the company's information security systems, ensuring that all procedures are followed on a daily, weekly, monthly, and annual basis. Provide support, within a team environment, for systems used to monitor and protect the enterprise assets. Detect, analyze, and respond to any suspicious cyber security activity across TECO/Emera business and operational networks, including all network infrastructure, operating systems, and server platforms throughout TECO Energy and its subsidiaries.

Develop an in-depth understanding of exploits (e.g., malware) and vulnerabilities, resolving issues by taking the appropriate corrective action, or following the appropriate escalation procedures. Assist with identifying and assessing threats to TECO's network and data, monitoring TECO's network for malicious activity, investigating intrusions and other relevant events, and has a maintaining a sophisticated and detailed understanding of the evolving threat landscape, includes assessing enterprise assets to include critical assets for secure configurations and maintaining and enforcing regulations regarding NERC Critical Infrastructure Protection (CIP), Sarbanes-Oxley (SOX), PCI, and corporate information security standards.

Advancement to a higher level is based on value added to the company through increased duties, responsibilities, and accomplishments. Advancement is not automatic, i.e. based solely on time in the job, but will be based on direct observation of the employee's performance, accomplishments, qualifications, and the business and/or technical needs of the department.

Education Required:

High School Diploma or equivalent. Preferred:
Bachelor's Degree in Computer Science, Information Systems, or other IT related discipline. Licenses/Certifications

Required:

From the list of certification vendors, one related Information Security professional certification or ability to obtain via self-study within one year of hire date (ex: (ISC)2, GIAC, ISACA, CompTIA, e-Council, etc.). Preferred: ITIL v3 and one or more of the following or similar Information Security professional certifications (ex: ACE, CCE, CEH, CISA, CISM, CISSP, CRISC, EnCE, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCWN, GICSP, GMON, GNFA, GPEN, GPPA, GREM, GWAPT, GXPN, OSCP, SSCP).

Related Experience

Required:

5 years of related Cyber Security, IT experience or Technical (hands-on networking, telecommunications such as radios, satellites, communications, hardware, software or experience. . May consider a degree in lieu of experience. An Associates degree in Computer Science, Information Systems or other IT related discipline and 3 years of experience or a Bachelors in Computer Science, Information Systems or other IT related discipline and 1 years of experience.

Experience may include up to one year of demonstrated IT experience, within a formal college/university internship or co-op program.

Knowledge/Skills/Abilities (KSA)

Required:

Good working knowledge of major operating system security (Windows, Mac OS, Linux/Unix), endpoint, server, and network security. Good working knowledge of major security systems and functions for incident response, monitoring and forensic activities:
Firewalls, IDS/IPS, Antivirus/Antimalware, SIEM, Incident Response, Threat Prevention, Web/Application Control Filtering, Email Filtering, Net Flow Analysis, Endpoint Security, Configuration and Change Management, File Integrity Monitoring, and DLP. Good working knowledge of log, network, and system forensic investigation techniques. Basic working knowledge of networking protocols and systems administration. Basic working knowledge of identifying and capturing indicators of compromise and methods for detecting them within incidents.

Basic working knowledge with packet analysis and malware analysis. Basic working knowledge of the processes that ensure compliance with regulatory or industry requirements such as NERC CIP, SOX and PCI. Good analytical and risk assessment skills and strong listening, written and computer communication skills for reporting and auditing purposes.