Network Security Operations Analyst

At PGE, our work involves dreaming about, planning for, and realizing a smarter, cleaner, more enduring Oregon neighborhood. Its core to our DNA and we haven't stopped since we started in 1888. We energize lives, strengthen communities and drive advancements in energy that promote social, economic and environmental progress. We're always on the lookout for people passionate about leading and being a part of teams that are advancing innovative clean energy solutions that are also affordable and accessible to all.

Work Schedule:

Hybrid - 3 days in office / 2 days WFH

On-Call Requirement:
Approximately every 7-8 weeks (roughly 6-7 times per year)

PGE's Network Security Operations team is seeking a Staff Network Security Operations Analyst to support and administer two critical security platforms:
Splunk (SIEM) and Palo Alto Firewalls. This role is based out of our Tualatin / Sherwood location and reports within the Network Security Operations function. While this role is not a SOC analyst role, we are looking for someone who builds, configures, owns, and manages the platforms that security operations teams rely on - not someone who monitors dashboards. You will be the person who makes the magic happen behind the scenes, setting up indexes, configuring logging, tuning alerts, and ensuring the platform runs optimally for our internal cybersecurity customers.

Additionally, this role has a strong automation focus. You will identify repetitive administrative tasks and proactively develop automated solutions to improve efficiency across the team.

We want to hear your story. Can you tell us about:

• A time you identified a repetitive task and automated it?
• How have you proactively improved a platform or process without being asked?
• A technical challenge you solved independently?

We value evidence of initiative over years of experience. If you are a go‑getter who learns fast, thinks in code, and wants to build something meaningful - we want to talk to you.

• Splunk Administration:
  Own and manage PGE's Splunk SIEM platform, including index configuration, log ingestion, alert tuning, and system maintenance.
• Palo Alto Firewall Administration:
  Configure, manage, and maintain Palo Alto firewall infrastructure.
• Automation Development:
  Identify opportunities to automate repetitive administrative tasks using Python, Power Shell, or other scripting tools.
• Platform Support:
  Serve as a technical resource for cybersecurity teams who rely on the platforms you manage.
• Compliance Support:
  Contribute to initiatives supporting NERC CIP regulatory compliance requirements.
• Independent Troubleshooting:
  Proactively diagnose and resolve platform issues with minimal direction.
• Collaboration:
  
  Work closely with internal cybersecurity and IT teams as a key platform partner.

• Requires a bachelor's degree in an IT discipline or other related field or equivalent experience.
• Two or more years of progressive IT operations experience focusing on systems or networking support in an enterprise and/or data center environment.
• Splunk Administration experience:
  Hands‑on platform administration (not end‑user/SOC usage)
• Palo Alto Firewall Administration experience:
  Current, working knowledge
• Coding proficiency:
  Python and/or Power Shell required
• Automation mindset
  - Demonstrated ability to identify and automate manual or repetitive processes
• Self‑starter:
  Ability to work independently, troubleshoot without step‑by‑step guidance, and take initiative
• Adaptability:
  Comfortable with change and evolving priorities in a fast‑paced IT environment
• Requires a valid Driver's License and a history of safe driving practices.

• 2-4 years of relevant experience in network security operations or IT infrastructure
• Familiarity with NERC CIP compliance frameworks
• Experience in a role where you administered or built SIEM platforms (not just consumed alerts)
• Exposure to security operations environments where you owned platform configuration end‑to‑end
• Demonstrated examples of automation projects (scripts, tools, or workflows…