Cyber Security Analyst / Sr. Cyber Security Analyst (SOAR or Python Exp Required)

Dominion Energy is committed to providing reliable, affordable, and increasingly clean energy that powers our customers every day. If you want to work for a purpose-driven company that values safety and collaboration, we’re looking for you. You won’t just find a job here; you’ll find your career. Review the position below and apply today .

Military service members and veterans with ranks from E3-E5, W1-W2, or O1-O3, plus appropriate equivalent combination of education and years of experience as outlined below will be considered for this opportunity.  At this time, Dominion Energy cannot transfer or sponsor a work visa or employment authorization for this position. This position does not offer relocation assistance.    Job Summary

Dominion Energy’s Cyber Security Group is seeking a dynamic, detailed oriented Cyber Security Analyst to perform security event and incident investigations within our CSOC operations. Ability to work with SIEM, endpoint security, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms. Related SIEM experience is a must. Related SOAR playbook and automation workflow experience is a must. Perform continuous network monitoring and response in a complex and massive environment. Located in historical and scenic downtown Richmond, Virginia, the selected candidate will serve as a Cyber Security Analyst in a Cyber Security environment. There is one position available and it will be filled at the level commensurate with the successful candidate's knowledge, skills, and abilities. This position will support an existing and mature environment and use cases. Under general supervision, works from specifications to develop or modify moderately complex use cases and notable. Duties include but not limited to:

Design, develop, test, and maintain SOAR playbooks and automation workflows. Integrate security technologies including SIEM, EDR, ticketing systems, cloud platforms, and identity providers. Develop custom functions, REST API integrations, and reusable automation components. Troubleshoot SOAR execution failures, connector issues, and API communications. Experience working with commercial SIEM products including reporting, rule creation and modification, false positive tuning, and integration of threat feeds. A proven track record in working with common security tools. Perform security event and incident investigations. Ability to work with endpoint security, SIEM, IDS, network protocol analyzer, open-source Intelligence, and incident response platforms. Perform continuous network monitoring and response. Ability to read and understand packet captures. Required Knowledge, Skills, Abilities & Experience

Cyber Security Analyst - Must possess 3-5 years of work experience in cyber security or a cyber risk related role Senior Cyber Security Analyst -Must possess 5 years of work experience in cyber security or a cyber risk related role (level preferred) Security, Orchestration, Automation and Response ( SOAR ) experience OR 3 to 5 years of strong Python script writing experience gained through on the job experience is required . CSOC operations (not compliance) related SIEM experience is required . Demonstraes a strong understanding regarding the identification, gathering and analysis of information, threats, etc. to investigate andmitigate security risks or related IT networking experience (firewalls, CISCO, etc.). (Note: A Master's degree will count as one year of experience. A partial year of six months or more will be rounded up to one year). Specific knowledge, skills, abilities and experience

Demonstrates an strong understanding of cyber security and or data system protection principles and practices. An understanding of industrial cyber security standards and risk are desired. Demonstrated good organization and planning skills. Demonstrates a questioning attitude, with basic analytical and investigative skills.