Information Security Analyst III at Westinghouse Electric Company

Job description

Are you interested in being part of an innovative team that supports Westinghouse’s mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace. About the role: As an Information Security Analyst III you will identify, investigate, contain, and help resolve security incidents while developing and improving enterprise detection capabilities. You will translate threat intelligence, attacker tactics, techniques, and procedures into applicable monitoring, analytics, and response workflows across security platforms. The analyst serves as a senior technical resource between IT, Information Security, Legal, Data Privacy, HR, and business partners, providing clear findings, risk context, and recommendations. You will report to the Global Incident Response Supervisor and be located at Cranberry Township, PA. Hybrid work schedule. Relocation is not being offered for this role. Key Responsibilities: • Respond to and investigate computer security incidents observing established incident response policies, plans, and procedures, including evaluation, scoping, containment, eradication, recovery, and post-incident analysis. • Analyze problematic activity reported by security technologies and partners, including IT, HR, Legal, and Data Privacy, and maintain complete, accurate investigation case records. • Develop, validate, implement, and maintain detection use cases, analytics, alerts, reports, and dashboards in security monitoring platforms to identify potential threats and vulnerabilities. • Translate current threat intelligence and attacker tactics, techniques, and procedures into threat models, detection logic, investigation guidance, and response actions. • Plan, test, tune, and refine detection content to improve accuracy, coverage, and operational value while reducing false positives and unnecessary analyst workload. • Provide technical guidance to first responders and other security operations personnel during investigations and major incidents, including on-call support. • Provide relevant, and audience-appropriate incident updates, investigation findings, risk assessments, metrics, and recommendations to partners and decision makers. • Maintain the operational effectiveness and configuration of assigned security solutions, including Microsoft Defender, Microsoft Sentinel, SIEM, SOAR, forensic, and threat intelligence technologies. • Collaborate with security operations, threat intelligence, engineering, architecture, and teams to define requirements and improve detection and response capabilities. • Perform other responsibilities and special projects as assigned. Qualifications: • Bachelor's degree in information technology, computer science, information security, a related technical discipline, or equivalent education and relevant experience. • 4+ years of relevant cybersecurity experience, including substantial experience in security operations, incident response, threat detection, detection engineering, threat intelligence, forensics, security automation, or related functions. • Experience of incident response frameworks and methodologies, including NIST SP 800-61 and MITRE ATT&CK. • Advanced experience with SIEM and SOAR platforms, security analytics, forensics, threat intelligence, and endpoint or cloud security technologies. • Practical expertise with Microsoft security tools and applications, including Microsoft Defender and Microsoft Sentinel. • Create efficient, complex queries and analytics in large security data platforms and to build alerts, reports, dashboards, and automated response actions. • Experience maturing threat detection capabilities, translating threat intelligence into applicable detection logic, and developing detections as code using formats such as Sigma or YARA. • Proficiency with one or more high-level programming or scripting languages, such as Python or PowerShell. We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $85,200 to $106,500 per year. #LI-Hybrid Why Westinghouse? Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer: • Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options • Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members • 401(k) with Company Match Contributions to support employees' retirement • Paid Vacations and Company Holidays • Opportunities for Flexible Work Arrangements to promote work-life balance • Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers • Global Recognition and Service Programs to celebrate employee accomplishments and service • Employee Referral Program Westinghouse Electric Company is the global nuclear energy industry's first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system: • Safety and Quality • Integrity and Trust • Customer Focus and Innovation • Speed and Passion to Win • Teamwork and Accountability While our Global Headquarters are located in Cranberry Township, PA, we have over 11,000 employees working at locations in 19 different countries. You can learn more by visiting westinghousenuclear.com . Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities Get connected with Westinghouse on social media: Twitter | Facebook | LinkedIn | YouTube

Requirements

Must-haves

You will report to the Global Incident Response Supervisor and be located at Cranberry Township, PA. Hybrid work schedule.
Relocation is not being offered for this role.
Analyze problematic activity reported by security technologies and partners, including IT, HR, Legal, and Data Privacy, and maintain complete, accurate investigation case records.
Develop, validate, implement, and maintain detection use cases, analytics, alerts, reports, and dashboards in security monitoring platforms to identify potential threats and vulnerabilities.
Translate current threat intelligence and attacker tactics, techniques, and procedures into threat models, detection logic, investigation guidance, and response actions.
Plan, test, tune, and refine detection content to improve accuracy, coverage, and operational value while reducing false positives and unnecessary analyst workload.
Provide technical guidance to first responders and other security operations personnel during investigations and major incidents, including on-call support.
Provide relevant, and audience-appropriate incident updates, investigation findings, risk assessments, metrics, and recommendations to partners and decision makers.
Maintain the operational effectiveness and configuration of assigned security solutions, including Microsoft Defender, Microsoft Sentinel, SIEM, SOAR, forensic, and threat intelligence technologies.
Collaborate with security operations, threat intelligence, engineering, architecture, and teams to define requirements and improve detection and response capabilities.
Perform other responsibilities and special projects as assigned.
Bachelor's degree in information technology, computer science, information security, a related technical discipline, or equivalent education and relevant experience.
Experience of incident response frameworks and methodologies, including NIST SP 800-61 and MITRE ATT&CK.
Advanced experience with SIEM and SOAR platforms, security analytics, forensics, threat intelligence, and endpoint or cloud security technologies.
Practical expertise with Microsoft security tools and applications, including Microsoft Defender and Microsoft Sentinel.
Create efficient, complex queries and analytics in large security data platforms and to build alerts, reports, dashboards, and automated response actions.
Experience maturing threat detection capabilities, translating threat intelligence into applicable detection logic, and developing detections as code using formats such as Sigma or YARA.
Proficiency with one or more high-level programming or scripting languages, such as Python or PowerShell.
Why Westinghouse?
Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer:
Opportunities for Flexible Work Arrangements to promote work-life balance
Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
Global Recognition and Service Programs to celebrate employee accomplishments and service
Employee Referral Program

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Wellness