Talen Energy is looking for a dynamic Senior Security Engineer with additional experience with NERC CIP compliance and functional knowledge of NERC EACMS. In this role, you will collaborate closely with IT and stakeholders, and various business units to ensure the security and integrity of the enterprise. You will audit configurations, integrate, manage, and monitor security controls and systems. You will proactively seek threats and vulnerabilities that drive the vulnerability management cycle. Your expertise will be essential in maintaining compliance with security standards and protecting our digital assets.How You’ll Power the FutureAt Talen Energy, your work fuels progress. In this role, you’ll do more than contribute you’ll drive meaningful change by:<ul><li>Work in a self-directed environment and capable of providing consistent results with minimal daily guidance.</li><li>Develop IT security policies and procedures and implement necessary controls and procedures to cost effectively protect information technology assets from intentional or inadvertent modification, disclosure, or destruction.</li><li>Exhibit technical skill in configuring and maintaining cyber security tools.</li><li>Oversee ongoing operations of security assets to ensure that a defense in depth security model is in place. Ability to deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus/endpoint security software.</li><li>Participate in penetration testing of all systems to identify system vulnerabilities.</li><li>Ability to review logs for unusual or suspicious activity, interpret and make recommendations for resolution.</li><li>Recommend, coordinate, and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.</li><li>Collect meaningful metrics and key performance indicators for reporting cyber security threats and trends.</li><li>Focus on customer by providing business value. Build partnerships with key contacts in the business line by understanding their business needs, communicating these needs to appropriate IT staff, vendors, and consultants, and developing solutions to those problems.</li><li>Produce communications both oral and written to a variety of audiences. Effectively interact on business or technical matters and convey complex and/or critical material in an easy-to-understand style and manner.</li><li>Problem solving. Assure timely resolution of operational problems by utilizing effective problem management techniques. Display the highest level of critical thinking; making timely and sound decisions; reach decisions under conditions of uncertainty.</li><li>Support internal and external IT and security audits as needed.</li><li>On-call rotation assignment.</li><li>Occasional travel as requested.</li></ul>NERC CIP areas of responsibility include:<ul><li>NERC CIP Compliance which Includes maintaining NERC procedures and logs and other required documentation.</li><li>NERC EACMS (Electronic Access Control or Monitoring Systems) are cyber assets that perform electronic access control or monitoring for the Bulk Electric System (BES) Cyber Systems or Electronic Security Perimeters.<ul><li>Maintain all NERC CIP defined equipment to ensure they are kept up to date with all the latest cyber security updates</li></ul></li><li>Identify and investigate potential anomalies and/or non-compliances and escalate to management, as necessary; perform root cause analyses and develop corrective actions to mitigate the potential reoccurrence of near-misses and/or non-compliances.</li><li>Assist in the preparation of self-reports.</li><li>Support and assist in all efforts to prepare, draft, and coordinate materials responsive to regulatory questionnaires, and other Requests for Information.</li></ul>What You HaveMinimum Requirements<ul><li>One Industry certification required. CISSP, CCSP</li><li>A minimum of 10 years in IT/systems engineering with 5-7 (can be concurrent) years in Cybersecurity disciplines.</li><li>A bachelor's degree in computer science, Information Technology, Information Security, or related discipline may be considered as substitution for experience.</li><li>Advanced understanding of security control environment (access control, logging, authentication, encryption, integrity, etc.); Experience coordinating corporate-wide initiatives for obtaining security related assurances.</li><li>Ability to use logic and reasoning to identify the strengths and weaknesses of alternative; solutions, conclusions or approaches to problems.</li><li>Working knowledge of the inner workings of identity and access management principles such as OAuth, OIDC, SAML, and SCIM.</li><li>Experience designing and implementing identity and access control methodologies and policies (i.e. RBAC and ABAC)</li><li>Security Controls Assessment Experience.</li><li> Extensive experience with Information Security solutions including DLP, NAC, SASE, NGFW, EDR, XDR, SIEM, IAM, IDPs</li><li>Understanding of DevSecOps principles and practices.</li><li>Experience leading security projects, collaborating with cross-functional teams, and driving security initiatives.</li><li>Proven experience in incident response activities, including identifying and mitigating security incidents and conducting post-incident analysis.</li><li>Threat Hunting, Vulnerability mgt., SIEM, Cloud Security</li><li>Proficient in NIST, ISO 2700(2), CIS, SOC, CCM</li></ul>Preferred Qualifications<ul><li>CyberArk EPM, Privilege Cloud</li><li>CrowdStrike Falcon</li><li>Identity Providers such as Okta, Entra ID, AWS Identity Center</li><li>AWS Security Hub, AWS Inspector, GuardDuty</li></ul>Why Talen Energy?Power the FutureTalen Energy is one of the largest competitive energy and power generation companies in North America. We operate power plants that use diverse fuel sources in the most attractive wholesale power markets and sell energy to wholesale and retail customers in selected competitive markets. Our passion for excellence grows value through safe and efficient operations. We have an inclusive, diverse, respectful, and collaborative workplace, and a strong commitment to innovation, teamwork, and integrity. We generate energy for a brighter tomorrow.CollaborationOur passion for excellence grows value through safe and efficient operations. We have an inclusive, diverse, respectful, and collaborative workplace.Talen Energy offers an exceptional benefits program to its employees. Benefits include comprehensive health, dental, vision, prescription plans, life insurance, and disability insurance.  In addition, employees are eligible to participate in Talen Energy’s 401(k) plan.  Talen Energy also provides competitive vacation and sick time to its employees.Talen Energy is an equal opportunity, affirmative action employer dedicated to diversity and the strength it brings to the workplace. All qualified applicants will receive consideration for employment without regard to race, color, age, sex, religion, national origin, veteran status, sexual orientation, genetic information, gender identity, disability, perceived disability or any other protected characteristic as may be defined by applicable law.If you need assistance with the application process, please email us at <a href="mailto:Talenenergyrecruitment@talenenergy.com">Talenenergyrecruitment@talenenergy.com</a>Please be aware that Talen Energy requires extensive Nuclear Power Plant background security clearance.#LI-EF1Note: You will have an opportunity to add attachments to your application. Please use this opportunity to upload your resume, cover letter, and any relevant documents .

<div class="vc_row wpb_row vc_row-fluid vc_custom_1539771905320 vc_row-has-padding-top vc_row-has-padding-bottom vc_row-bg-position-top" data-vc-full-width="true" data-vc-full-width-init="true">
<div class="wpb_column vc_column_container vc_col-sm-12 vc_col-lg-6">
<div class="vc_column-inner vc_custom_1541586975592">
<div class="wpb_wrapper">
Susquehanna employees are some of the most highly skilled professionals in the industry and have a wide range of backgrounds that help them perform their jobs safely and efficiently. Our employees hone their skills through accredited training programs offered onsite and at industry workshops and conferences. Many employees are part of the plant&rsquo;s extensive emergency plan, either staffing positions for Susquehanna or volunteering at local emergency operation centers throughout the 10-mile radius surrounding the station. Most of our employees live in nearby communities and donate thousands of dollars to nonprofit organizations, including the United Way, as well as many other worthwhile community projects.
</div>
</div>
</div>
</div>

Senior Cybersecurity Engineer

Talen Energy is looking for a dynamic Senior Security Engineer with additional experience with NERC CIP compliance and functional knowledge of NERC EACMS. In this role, you will collaborate closely with IT and stakeholders, and various business units to ensure the security and integrity of the enterprise. You will audit configurations, integrate, manage, and monitor security controls and systems. You will proactively seek threats and vulnerabilities that drive the vulnerability management cycle. Your expertise will be essential in maintaining compliance with security standards and protecting our digital assets.How You’ll Power the FutureAt Talen Energy, your work fuels progress. In this role, you’ll do more than contribute you’ll drive meaningful change by:<ul><li>Work in a self-directed environment and capable of providing consistent results with minimal daily guidance.</li><li>Develop IT security policies and procedures and implement necessary controls and procedures to cost effectively protect information technology assets from intentional or inadvertent modification, disclosure, or destruction.</li><li>Exhibit technical skill in configuring and maintaining cyber security tools.</li><li>Oversee ongoing operations of security assets to ensure that a defense in depth security model is in place. Ability to deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus/endpoint security software.</li><li>Participate in penetration testing of all systems to identify system vulnerabilities.</li><li>Ability to review logs for unusual or suspicious activity, interpret and make recommendations for resolution.</li><li>Recommend, coordinate, and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.</li><li>Collect meaningful metrics and key performance indicators for reporting cyber security threats and trends.</li><li>Focus on customer by providing business value. Build partnerships with key contacts in the business line by understanding their business needs, communicating these needs to appropriate IT staff, vendors, and consultants, and developing solutions to those problems.</li><li>Produce communications both oral and written to a variety of audiences. Effectively interact on business or technical matters and convey complex and/or critical material in an easy-to-understand style and manner.</li><li>Problem solving. Assure timely resolution of operational problems by utilizing effective problem management techniques. Display the highest level of critical thinking; making timely and sound decisions; reach decisions under conditions of uncertainty.</li><li>Support internal and external IT and security audits as needed.</li><li>On-call rotation assignment.</li><li>Occasional travel as requested.</li></ul>NERC CIP areas of responsibility include:<ul><li>NERC CIP Compliance which Includes maintaining NERC procedures and logs and other required documentation.</li><li>NERC EACMS (Electronic Access Control or Monitoring Systems) are&nbsp;cyber assets that perform electronic access control or monitoring for the Bulk Electric System (BES) Cyber Systems or Electronic Security Perimeters.<ul><li>Maintain all NERC CIP defined equipment to ensure they are kept up to date with all the latest cyber security updates</li></ul></li><li>Identify and investigate potential anomalies and/or non-compliances and escalate to management, as necessary; perform root cause analyses and develop corrective actions to mitigate the potential reoccurrence of near-misses and/or non-compliances.</li><li>Assist in the preparation of self-reports.</li><li>Support and assist in all efforts to prepare, draft, and coordinate materials responsive to regulatory questionnaires, and other Requests for Information.</li></ul>What You HaveMinimum Requirements<ul><li>One Industry certification required. CISSP, CCSP</li><li>A minimum of 10 years in IT/systems engineering with 5-7 (can be concurrent) years in Cybersecurity disciplines.</li><li>A bachelor's degree in computer science, Information Technology, Information Security, or related discipline may be considered as substitution for experience.</li><li>Advanced understanding of security control environment (access control, logging, authentication, encryption, integrity, etc.); Experience coordinating corporate-wide initiatives for obtaining security related assurances.</li><li>Ability to use logic and reasoning to identify the strengths and weaknesses of alternative; solutions, conclusions or approaches to problems.</li><li>Working knowledge of the inner workings of identity and access management principles such as OAuth, OIDC, SAML, and SCIM.</li><li>Experience designing and implementing identity and access control methodologies and policies (i.e. RBAC and ABAC)</li><li>Security Controls Assessment Experience.</li><li>&nbsp;Extensive experience with Information Security solutions including DLP, NAC, SASE, NGFW, EDR, XDR, SIEM, IAM, IDPs</li><li>Understanding of DevSecOps principles and practices.</li><li>Experience leading security projects, collaborating with cross-functional teams, and driving security initiatives.</li><li>Proven experience in incident response activities, including identifying and mitigating security incidents and conducting post-incident analysis.</li><li>Threat Hunting, Vulnerability mgt., SIEM, Cloud Security</li><li>Proficient in NIST, ISO 2700(2), CIS, SOC, CCM</li></ul>Preferred Qualifications<ul><li>CyberArk EPM, Privilege Cloud</li><li>CrowdStrike Falcon</li><li>Identity Providers such as Okta, Entra ID, AWS Identity Center</li><li>AWS Security Hub, AWS Inspector, GuardDuty</li></ul>Why Talen Energy?Power the FutureTalen Energy is one of the largest competitive energy and power generation companies in North America. We operate power plants that use diverse fuel sources in the most attractive wholesale power markets and sell energy to wholesale and retail customers in selected competitive markets. Our passion for excellence grows value through safe and efficient operations. We have an inclusive, diverse, respectful, and collaborative workplace, and a strong commitment to innovation, teamwork, and integrity. We generate energy for a brighter tomorrow.CollaborationOur passion for excellence grows value through safe and efficient operations. We have an inclusive, diverse, respectful, and collaborative workplace.Talen Energy offers an exceptional benefits program to its employees. Benefits include comprehensive health, dental, vision, prescription plans, life insurance, and disability insurance.&nbsp; In addition, employees are eligible to participate in Talen Energy’s 401(k) plan.&nbsp; Talen Energy also provides competitive vacation and sick time to its employees.Talen Energy is an equal opportunity, affirmative action employer dedicated to diversity and the strength it brings to the workplace. All qualified applicants will receive consideration for employment without regard to race, color, age, sex, religion, national origin, veteran status, sexual orientation, genetic information, gender identity, disability, perceived disability or any other protected characteristic as may be defined by applicable law.If you need assistance with the application process, please email us at&nbsp;<a href="mailto:Talenenergyrecruitment@talenenergy.com">Talenenergyrecruitment@talenenergy.com</a>Please be aware that Talen Energy requires extensive Nuclear Power Plant background security clearance.#LI-EF1Note:&nbsp;You will have an opportunity to add attachments to your application. Please use this opportunity to&nbsp;upload your resume, cover letter, and any relevant documents .

Senior Cybersecurity Engineer

About the Job

About the Company

Susquehanna Steam Electric Station

Similar Jobs

Senior Information Systems Analyst (Cyber Security Analyst)

Senior Information Systems Analyst (Cyber Security Analyst)

Director, Cybersecurity Architecture

Director, Cybersecurity Architecture

Cybersecurity Engineer

Cybersecurity Engineer

Director, CyberSecurity

Director, CyberSecurity

Cyber Security Engineer

Cyber Security Engineer

Sr. Specialist, Security Engineer

Sr. Specialist, Security Engineer

Manager, Cybersecurity & Operations

Manager, Cybersecurity & Operations

Senior Security Architect

Senior Security Architect

Manager, IT Security

Manager, IT Security

Senior Cybersecurity Engineer

Senior Cybersecurity Engineer