Cybersecurity Analyst

Golden State Water Company is seeking a Cybersecurity Analyst to provide 24x7 onsite support in San Dimas, California. In this hands‑on role, you will help detect, respond to, mitigate, and report cyber threats while protecting the confidentiality, integrity, and availability of company information systems. The position supports the organization’s use of the NIST Cybersecurity Framework and related regulatory compliance activities.

• Proactively monitor the environment for new and emerging cyber threats and take steps to mitigate attacks before they occur.
• Independently review, investigate, and respond to real‑time security alerts.
• Independently review real‑time and historical reports to identify security and/or compliance violations.
• Communicate with senior cybersecurity personnel and IT management regarding critical incidents and strategic security requirements.
• Review system audit logs and logs from other cybersecurity solutions.
• Work with Security Operations Center (SOC) analysts and management to triage and respond to security alerts.
• Coordinate assessment, containment, and eradication with the Incident Response Team.
• Coordinate tuning of preventative and detective security controls to increase fidelity and reduce false positives.
• Manage threat lists (for example, whitelists and blacklists).
• Ensure vulnerabilities are remediated according to established plans, including running internal vulnerability and penetration testing tools as instructed.
• Research and recommend security patches for cybersecurity solutions, including firmware, operating systems, and software.
• Evaluate the security impact of software changes.
• Help monitor vulnerability and threat services to understand current risk and recommend response and mitigation/countermeasure strategies.
• Partner with business units and end users to create and enhance Data Loss Prevention (DLP) rules to expand protection of company data.
• Conduct independent research to provide informed opinions on third‑party vendor selections and processes for Table Top cybersecurity exercises across business units.
• Compose or review cybersecurity incident response plans and runbooks, and create or verify automation methods for plan and runbook implementation.
• Recommend updates to IT security policies and procedures.
• Perform other related duties as required.

• High School Diploma or equivalent required.
• Minimum of three years of experience in information technology, information technology security, or cyber security‑related fields required.
• At least one year of cyber security experience desired.
• Experience desired in cyber security incident collection, analysis, and reporting process procedures.
• Hands‑on experience desired supporting and maintaining information technology and cyber security tools and technologies, including endpoint protection, vulnerability and patch management, desktop management, mobile security, and alerting and monitoring utilities.
• Security+ and/or Network+ certifications desired.
• Fundamental understanding of computer networking (TCP/IP).
• Hands‑on experience supporting Microsoft Windows and Linux operating systems and platforms.
• Knowledge of cyber threats and vulnerabilities, including adversarial tactics, techniques, and procedures.
• Scripting experience (Power Shell or Python) is a plus.
• Ability to analyze complex information, identify key points, and communicate clearly.
• Ability to produce high‑quality work on a timely basis in a fast‑paced environment; able to manage multiple tasks with attention to detail.
• Excellent analytical and problem‑solving skills, with strong interpersonal skills for interaction with team members and upper management.
• Ability to work independently often with sound judgment and…