Senior Cyber Security Analyst Penetration Tester); Cayce, SC or Richmond, VA); CAYCE, SC,

Dominion Energy is committed to providing reliable, affordable, and increasingly clean energy that powers our customers every day. If you want to work for a purpose-driven company that values safety and collaboration, we’re looking for you. You won’t just find a job here; you’ll find your career.

Military service members and veterans with ranks from E5-E9, W1-CW5, or O3-O6, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity. At this time, Dominion Energy cannot transfer or sponsor a work visa or employment authorization for this position. This position does not offer relocation assistance.

Do you have what it takes? This is not a typical cyber security role. The successful candidate will help protect critical infrastructure by identifying and clearly communicating exploitable weaknesses before they can be used by real-world threats. For our employees, cyber security is a mission, not simply a job. If you are an experienced, motivated penetration tester who is committed to learning, improving tradecraft, and helping others reduce risk, we want to hear from you.

This position is specifically focused on penetration testing and offensive security assessments rather than traditional cyber security analyst responsibilities. The selected candidate will join an established team of three penetration testers and conduct authorized assessments across applications, systems, internal and external networks, cloud environments, identity platforms, and related enterprise technologies.

The role includes the full penetration-testing lifecycle: planning and scoping engagements, performing hands‑on testing, identifying and validating attack paths, evaluating security controls, documenting findings, communicating risk, supporting remediation, and validating corrective actions. Testing must be performed ethically, within an authorized scope, and with appropriate consideration for business and operational risk.

The selected candidate must produce clear, high‑quality reports that explain technical findings, potential business impacts, supporting evidence, and practical remediation recommendations. The candidate must also be comfortable presenting results to both technical and non‑technical audiences and tailoring the level of detail to the recipients.

Experience with Operational Technology (OT), Industrial Control Systems (ICS), SCADA, or critical infrastructure environments is preferred. Candidates with this background should understand the additional safety, reliability, availability, and operational considerations associated with assessing industrial environments.

Key Responsibilities

• Plan, scope, and execute authorized penetration tests and offensive security assessments.
• Identify and validate vulnerabilities, exploitable weaknesses, attack paths, and security‑control gaps.
• Assess web and enterprise applications, APIs, network infrastructure, cloud environments, identity platforms, systems, and related technologies.
• Where applicable, support assessments involving OT, ICS, SCADA, industrial control networks, or critical infrastructure environments.
• Prepare high‑quality reports that clearly describe technical evidence, risk, business impact, and practical remediation recommendations.
• Present findings and recommendations to technical teams, system owners, business stakeholders, and management.
• Partner with technology owners to prioritize findings, support remediation, and validate corrective actions.
• Collaborate with the other penetration testers through peer review, methodology development, knowledge sharing, and coordinated testing activities.
• R…