Cyber Security Analyst – NERC CIP / Patch Management
Job Type:
7+ month Contract with possible extension
Work Arrangement:
100% Remote
Level:
I / II / III based on experience
Position Overview
We are seeking a
Cyber Security Analyst
to support cybersecurity and compliance activities within a critical infrastructure environment. The ideal candidate will have experience with
NERC CIP requirements, vulnerability management, security patch management, and cybersecurity operations
.
This role will primarily support
CIP-007 R2 patch management processes
, while also contributing to vulnerability assessments, security baselines, incident response, cybersecurity projects, and compliance activities.
Key Responsibilities
Monitor and support
CIP-007 R2 security patch management
processes and related tools.
Support compliance with
NERC CIP
requirements and cybersecurity controls protecting critical infrastructure.
Maintain and support the organization's cybersecurity program and protection of corporate cyber assets.
Monitor, track, and coordinate
security patches and vulnerability remediation
throughout the lifecycle.
Perform or support
vulnerability assessments
of systems, applications, and services.
Develop and maintain
security baselines, procedures, standards, and cybersecurity documentation
.
Work with IT and business teams to incorporate appropriate security controls into
on-premises, cloud, and SaaS solutions
.
Translate technical findings from security and assessment tools into clear
reports, remediation plans, and action items
.
Participate in the
cybersecurity incident response
process.
Support cybersecurity awareness and training activities.
Assist with cybersecurity projects, including technology implementation, vendor evaluations, vulnerability assessments, and security reviews.
Collaborate with technical and business stakeholders to identify security risks and implement appropriate controls.
Participate in an
on-call rotation
to support security alerts and incidents, including occasional after-hours onsite response.
Support other cybersecurity and compliance activities as required.
Required Qualifications
4–7 years of professional experience
in cybersecurity, information security, IT security, or a related IT discipline for a Level II profile.
Hands-on experience with
vulnerability management and/or security patch management
.
Understanding of
NERC CIP
requirements; experience with
CIP-007 / CIP-007 R2
is highly preferred.
Experience working with security tools, vulnerability assessment platforms, or patch management solutions.
Experience with one or more IT infrastructure areas such as
Windows, Linux/Unix, networking, or systems administration
.
Ability to analyze technical security findings and communicate them through clear reports and remediation plans.
Strong written and verbal communication skills.
Ability to work independently while collaborating effectively with technical and business teams.
Ability to participate in an
on-call security response rotation
.
Willingness to travel occasionally to company locations when required.
Preferred Qualifications
Experience in
utilities, energy, power, critical infrastructure, OT, ICS, or industrial environments
.
Direct experience with
NERC CIP compliance
and BES Cyber Systems.
Experience specifically supporting
CIP-007 R2 patch management
.
Experience with security baselines, system hardening, and configuration management.
Experience with cybersecurity incident response.
Bachelor's degree in
Computer Science, Cybersecurity, Information Security, IT, or a related discipline
.
Security certification such as
CISSP, GIAC/GSEC, Security+, or similar
.
Location & Travel
100% Remote
Candidate must reside in an eligible state.
Candidates residing in
California, Colorado, Illinois, Kentucky, Massachusetts, Montana, Nebraska, New York, Oregon, or Washington are not eligible at this time.
Frequent travel to facilities in the
Akron, OH area
may be required.
Occasional overnight travel within
OH, PA, NJ, MD, and WV
may be required.
Experience Levels
Level I:
0–4 years of professional experience
Level II:
4–7 years of professional experience
Level III:
7–10 years of professional experience
Ideal Candidate Profile The strongest candidates will typically have:
NERC CIP / CIP-007
Patch Management
Vulnerability Management
Security Assessment / Remediation
Windows/Linux or Networking
Cybersecurity Operations
Experience in the
utility or energy sector
is a strong plus.
Ankita Singh
Senior Recruitment Consultant
TPI Global Solutions
Email
:Ankitas@tpiglobalsolutions.com