Cybersecurity Specialist

Join the Clean Energy Revolution.

Become a Cybersecurity Specialist at Southern California Edison (SCE) and build a better tomorrow. In this role, you'll play a key role in advancing application and product security across the enterprise by embedding security into the software development lifecycle (SDLC). You will partner closely with engineering, architecture, and cybersecurity teams to design, implement, and scale secure‑by‑design practices that protect critical systems and data.

• Integrate security into the software development lifecycle (SDLC) by working directly with development teams to implement secure coding practices, threat modeling, and security design reviews.
• Support the development and maturation of Dev Sec Ops  capabilities, including automation of security testing within CI/CD pipelines (e.g., SAST, DAST, SCA, secrets scanning).
• Perform application and product security assessments, including code reviews, architecture analysis, and vulnerability identification across custom and third‑party solutions.
• Develop, implement, and maintain application security standards, patterns, and guardrails to ensure consistent and scalable security practices.
• Contribute to the design and implementation of secure cloud‑native architectures, including containerized and microservices‑based applications.
• Collaborate with cybersecurity architecture and engineering teams to align application security practices with enterprise security strategy.
• Monitor emerging application security threats, vulnerabilities, and industry best practices, incorporating this knowledge into improved defensive capabilities.

• Investigates and responds to security alerts including on‑call rotation.
• Supports the development, design, logistics, and facilitation of internal and external cybersecurity exercises. Steers the analysis of network traffic and system data to identify anomalous activity and potential threats to resources.
• Delivers cyber incident triage including identifying the specific vulnerability and making recommendations which enable expeditious remediation.
• Conducts vulnerability research activities, gathers information on new and emerging threats and vulnerabilities.
• Reports on and suggests solutions for damage to the data and infrastructure as a result of cyber incidents. Supports the strategic development of Cyber Security Programs ensuring alignment with the cyber security strategy and develops and improves cyber security procedures owned by the team.
• Manages cyber incident trend analysis and reporting.
• Creates and maintains high quality documentation related to IT processes including flow charts and data flow diagrams.
• Maintains the cybersecurity post‑incident after action tracking process.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Three or more years of experience in information technology, information security and/or cybersecurity. US Citizenship Required.

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related technical field.
• Experience implementing application security practices within the software development lifecycle (SDLC), including secure coding, threat modeling, and security design reviews.
• Hands‑on experience with Dev Ops tooling and CI/CD pipeline integration.
• Familiarity with cloud platforms such as AWS, Azure, or GCP and associated security best practices.

• This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days. Unless otherwise noted, employees are required to work and reside in the state of California. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
• Qualified applications with…