Cyber Insider Risk & Forensics Analyst Southern California Edison : California Category

Cyber Insider Risk & Forensics Analyst

Join the Clean Energy Revolution.

Become a Cyber Insider Risk & Forensics Analyst at Southern California Edison (SCE) and build a better tomorrow. In this job, you'll help protect our organization from internal threats while gaining hands‑on experience in digital investigations and behavioral analytics. As a Cyber Insider Risk & Forensics Analyst, you'll support investigations into potential insider threats, assist with digital forensic analysis, and contribute to monitoring and response efforts across the enterprise.

This is a great opportunity for individuals with a foundational understanding of digital forensics and a passion for learning in a collaborative environment.

• Investigates and responds to security alerts including on‑call rotation
• Supports the development, design, logistics, and facilitation of internal and external cybersecurity exercises
• Steers the analysis of network traffic and system data to identify anomalous activity and potential threats to resources
• Delivers cyber incident triage including identifying the specific vulnerability and making recommendations which enable expeditious remediation
• Conducts vulnerability research activities, gathers information on new and emerging threats and vulnerabilities
• Reports on and suggests solutions for damage to the data and infrastructure as a result of cyber incidents
• Supports the strategic development of Cyber Security Programs ensuring alignment with the cyber security strategy and develops and improves cyber security procedures owned by the team
• Manages cyber incident trend analysis and reporting
• Creates and maintains high quality documentation related to IT processes including flow charts and data flow diagrams
• Maintains the cybersecurity post‑incident after‑action tracking process
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Three or more years of experience in information technology, information security and/or cybersecurity.
• US Citizenship Required.

• One or more years of experience collecting and analyzing digital evidence using forensic tools such as FTK, Magnet Axiom, or EnCase.
• Degree or coursework in Cybersecurity, Digital Forensics, Information Technology, or related field.
• One or more years of experience working with security operations, incident response, or behavioral analytics tools.
• One or more years of experience using Insider risk tooling (Forcepoint, Splunk UBA, etc.)
• One or more years of experience using Splunk or SIEM