Get Into Energy Jobs

Job Information

MidAmerican Energy Company Operational Technology Security Analyst III / IT Security Adviser- Operational Technology in Salt Lake City, Utah

Primary Job Duties and Responsibilities (Essential Job Function) Working independently with general direction, supports BHE corporate security and resilience group’s strategy as a lead resource on emerging national and global cyber security threats and mitigation tactics. Provides direction and leadership on security requirements for Operational Technology (OT) related projects and advanced security analytics. Conducts analysis, creates security specifications, and develops new security measures in an OT environment. Provides technical assistance and consultation to enable the company to meet security goals and requirements. Typical Duties Advises CSO management and staff in evaluating technology initiatives and projects to determine cybersecurity requirements and controls necessary to comply with company policies, standards, and industry best practices. Engage with OT leaders and the CSO to address the most complex design considerations to appropriately manage risk on behalf of the company. Acts as a subject matter expert for OT organizations across BHE for responding to classified and unclassified physical and cyber threat reporting, which requires an awareness of cyber and physical security issues in the utility industry and the ability to filter data sources to report the threat information pertinent to BHE interests. Provides and develops guidance to ensure company adherence with various regulatory and policy requirements, including ISO 27001 Information Security Management, the Critical Infrastructure Protection Standards (NERC CIP), FERC requirements and TSA directives for pipeline operators and BHE Security Policies and Procedures. Collaborate with the CSO Threat and Vulnerability program to evaluate emerging Threat Intelligence applicable to gas transmission and electrical generation, transmission, and distribution. Support organization as a senior security subject matter expert for ICS systems supporting gas transmission and electrical generation, transmission, and distribution. Maintain strong understanding of network topography across all businesses to ensure adequate defense in depth design across the enterprises. Maintain an awareness of geographic location and type of BHE facility for which pertinent security information will be reported. Provide timely and accurate cross-platform support in response to security threats that may arise that pose a risk to industrial control systems across the company's computing enterprise. Performs any additional responsibilities as requested or assigned. Bachelor’s degree in Computer Science, Information Technology, or related field; or equivalent work experience. (Typically, six years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree.) Five years of experience working with Industrial Control Systems (ICS), including distributed control systems (DCS) or supervisory control and data acquisition (SCADA) systems. The Operational Technology Security Analyst III position requires five years of risk and security governance programs experience (e.g., CIS Top 20, OSI 27001 / 27019 and NIST 800-53). The IT Security Adviser - OT position requires six years of information risk and security governance programs experience (e.g., CIS Top 20, ISO 27001 / 27019 and NIST 800-53). Demonstrated ability to rapidly learn network topology and translate into mitigation actions. Advanced knowledge of security principles is desired through achievement and active pursuit of advanced security certification including CISM or CISSP or the SANS GICSP. Experience in intelligence management, security technologies and corporate security topics preferred. Advanced knowledge and demonstrated understanding of information technology terms, equipment, systems, functions and major vendors. Excellent oral and written communication skills, including presentation skills. Effective interpersonal skills and customer relationship skills. Effective analytical, problem-solving and decision-making skills. Project management skills; ability to prioritize and handle multiple tasks and projects concurrently. Ability to obtain and maintain a government security clearance of a Secret classification or higher. Employees must be able to perform the essential functions of the position with or without an accommodation. Position descriptions are developed as guides for the employees of Berkshire Hathaway Energy. The management team of Berkshire Hathaway Energy reserves the right to modify job responsibilities and position requirements to meet the corporate business goals and needs. Job: Information Protection* *Organization: Corp - Corporate Security & Resilience *Title: *Operational Technology Security Analyst III / IT Security Adviser- Operational Technology * Location: *UT-Salt Lake City Requisition ID: 2201096 Other Locations: IA-Des Moines, OR-Portland, NV-Las Vegas, United States, NE-Omaha