Get Into Energy Jobs

Job Information

Duke Energy Cybersecurity Systems Engineering Analyst (Firewall) in Charlotte, North Carolina

More than a career - a chance to make a difference in people's lives.

Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.

Job Summary

The Cybersecurity Systems Engineer Analyst position focuses on all facets of day to day next-generation firewall administration, support, and operations. It also includes some project oriented initiatives, troubleshooting incidents of varying severity, various compliance activities, software and firewall policy optimization & maintenance. Candidates who have a network support or design background who wish to transition into a role in Cybersecurity are encouraged to apply.


  • Performs day to day firewall policy administration.

  • Maintains security framework across the enterprise.

  • Participates in cybersecurity projects and initiatives within Cybersecurity, IT, and other business units.

  • Contributes frequently to team knowledge base.

  • Maintains up-to-date documentation of security infrastructure, changes, and security strategies.

  • Documents work performed.

  • Interacts with business partners and other IT Teams as necessary to understand, apply, and enforce security requirements.

  • Proactively identifies/makes recommendations on potential security issues and solutions.

  • Drive continuous improvement of processes and procedures to improve analysis, detection, and mitigation of incidents in support of the overall Cyber Defense mission.

  • Participates in on-call rotation duties.

  • Provides increased availability during inclement weather, cyber, and significant incidents.

  • Adheres to proper Change Management requirements and processes.

  • Responds to incidents in a timely manner.

  • Configures, installs, and maintains security hardware.

  • Deploys code upgrades.

  • Leads investigation/troubleshooting efforts during service disruption events.

  • Represents IT Security organization professionally in interaction with internal business partners and other IT Support groups.

Basic/Required Qualifications:

  • Bachelors degree in Cybersecurity, Computer Science or other closely related discipline

  • In addition to required degree, and or Associates degree in Cybersecurity or Computer Science and five years minimum related work experience

  • In lieu of Bachelors degree and five years minimum related work experience listed above, High School/GED AND nine years minimum related work experience

Desired Qualifications:

  • Masters degree in Cybersecurity, Computer Science, IT, or other closely related discipline

  • Hands on experience working with Palo Alto Networks next-generation firewalls

  • Hands on experience working with Cisco ASA firewalls

  • Palo Alto Networks Certified Network Security Administrator (PCNSA)

  • Palo Alto Networks Certified Network Security Engineer (PCNSE)

  • Cisco CCNA, Cisco DevNet Associate, Cisco CCNP Enterprise/Security, Cisco DevNet Professional

  • Ability to develop firewall policy while balancing customer requirements and security controls.

  • Ability to analyze firewall security and traffic logs.

  • Experience tuning intrusion and malware detection capabilities on Palo Alto platform.

  • Experience with logging profiles and security profiles.

  • Virtual and cloud firewall experience.

  • Experience with various edge security devices and architecture.

  • Cyber security project experience.

  • Network engineering/design/project experience.

  • General networking understanding and/or experience to include Understanding of TCP/IP communications & knowledge of how common protocols and applications work at the network level including DNS, DHCP, HTTP, and SMB.

  • Working understanding of security principles & desire to improve security posture of enterprise.

  • Experience with network monitoring, analysis, and troubleshooting.

  • Working knowledge of VPN configuration and troubleshooting.

  • Experience analyzing network traffic.

  • Working knowledge of NAT principles and troubleshooting.

  • Experience and understanding of logging technology including log aggregation and configuration on firewall supporting infrastructure.

  • Security event management experience and/or Cybersecurity operations.

  • Windows, UNIX/Linux, Python, or related command line and scripting experience for automation and efficiency efforts.

  • Demonstrated skill in protecting a network against various threats. (e.g., anti-malware, restrict/prevent external devices)

  • Experience with forensics, IOCs,and malware analysis concepts and methods.

  • Familiarity or experience with the Cyber Kill Chain® methodology

  • Experience with the maintenance, configuration and operation of next-gen firewalls and other Cybersecurity tools in virtual and cloud environments.

  • Working knowledge of identity and access services in a large enterprise.

  • Experience with Tufin Orchestration Suite firewall management tool.

  • Compliance experience with industry standards (NERC CIP, PCI, SOX)

  • Experience supporting a large enterprise network.

  • Experience in Data Center environment.

  • Experience with NSX.

  • Strong team player and ability to manage multiple tasks and assignments.

  • Demonstrated commitment to personal and team success.

Working Conditions:

  • Hybrid – Work will be performed from both remote and onsite locations after the onboarding period. However, hybrid employees should live within a reasonable commute to the designated Duke Energy facility.

  • Candidate must be able to lift 30 pounds above the waist

Travel Requirements


Relocation Assistance Provided (as applicable) No

Represented/Union Position No

Visa Sponsored Position No

Posting Expiration Date

Monday, December 6, 2021

All job postings expire at 12:01 AM on the posting expiration date.

Please note that in order to be considered for this position, you must possess all of the basic/required qualifications.

We are one of the largest electric power holding companies in the United States, supplying and delivering electricity to approximately 7.4 million U.S. customers. We have approximately 52,700 megawatts of electric generating capacity in the Carolinas, the Midwest and Florida – and natural gas distribution services serving more than 1.5 million customers in Ohio, Kentucky, Tennessee and the Carolinas. Our commercial and international businesses own and operate diverse power generation assets in North America and Latin America, including a portfolio of renewable energy assets.

Regardless of your skill set or specific interest, we're looking for the best and brightest talent in the industry. Our people make us great - and we're always looking for more. Find your career path today at Duke Energy, where it's more than a career - it's a chance to make a difference in people's lives.

Brighter opportunities. Brighter futures. Duke Energy values ideas that come from a diverse and inclusive workforce, and we’re dedicated to providing a work environment where all people are valued, respected and able to reach their full potential. Duke Energy is an equal opportunity employer and does not discriminate against any employee or applicant for employment because of race, color, sex, pregnancy, childbirth or related medical conditions, including but not limited to lactation, religion, national origin, ancestry, ethnicity, citizenship, sexual orientation, gender identity, gender expression, age, marital status, physical or mental disability, genetic information, medical condition, military status, or protected veteran status. Duke Energy complies with all applicable state, federal and local laws, regulations and ordinances prohibiting discrimination.