Cyber Threat Intelligence Advisor (m/w/d)

Job Description

Become a Cyber Threat Intelligence Advisor at Southern California Edison (SCE) and build a better tomorrow. In this job, you'll be a part of the Cyber Threat Intelligence team, a sub-team under SCE's broader Cybersecurity Operations Center (CSOC) - the team responsible for keeping SCE's network and grid secure from emerging threats and cyber actors.

We are looking for an intelligence analyst that is not only comfortable working in a CSOC environment, but is also familiar with both classified and unclassified threat intelligence research and engagements.

In this role, you will:

1. Help shape and mature SCE's Cyber Threat Intelligence program by refining intelligence strategy, processes, capabilities, operating models, collection priorities, toolsets, and workflows while contributing to both tactical execution and long-term program development.
2. Lead the operationalization and sustainment of SCE's classified intelligence program, including engagement with federal, industry, and intelligence-sharing partners while providing onsite operational support within the classified facility as needed.
3. Regularly develop intelligence products, executive briefings, and threat assessments that communicate actionable insights, emerging risks, and strategic intelligence to both technical stakeholders and senior leaders.
4. Analyze emerging threats, adversary campaigns, tactics, techniques, and procedures (TTPs) through classified and unclassified sources to assess potential risks to SCE and drive intelligence activities aligned to Priority Intelligence Requirements (PIRs).
5. Execute and support day-to-day intelligence program operations including developing and tuning intelligence-related alerts, leveraging intelligence platforms and tooling, conducting research in support of Priority Intelligence Requirements (PIRs), and integrating intelligence into CSOC activities such as incident response and investigations.

As a Cybersecurity Advisor, your work will help power our planet, reduce carbon emissions and create cleaner air for everyone. Are you ready to take on the challenge to help us build the future?

Responsibilities

• Manages cybersecurity project delivery by ensuring the cybersecurity team meets success criteria.
• Delivers project reporting for assigned projects, conducts critical analysis of project status, potential risks, and continual process improvement.
• Coordinates and performs appropriate maintenance to ensure reliable and secure performance of the security systems, including applying security patches, implementing version upgrades, modifying and improving services, and performing ongoing operational management tasks.
• Contributes to an overall cybersecurity governance strategy, standards, and operational procedures.
• Ensures technology risks impacting the business are effectively identified, quantified, communicated, and managed, including recommendations for resolution and identifying root causes/key themes.
• Prepares and updates Plan of Actions & Milestones (POA&M) that identify security weaknesses, establish milestones, and implements compensating controls for remediating these weaknesses, while tracking the progress and effectiveness of the remediation.
• Oversees the production of evidence to support internal and external audits.
• Provides cybersecurity and risk assessments for new networks, services, and devices as needed.
• Drives periodic monitoring of audit logs in accordance with requirements, and reports findings and concerns for further analysis and action, including breach notification and initiation of incident response, in accordance with protocols and procedures.
• Delivers programs and processes to reduce information security risk and strengthen SCE's security posture.
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

Minimum Qualifications

• Seven or more years of experience in information technology, information security and/or cybersecurity.
• US Citizenship Required.
• Currently holds or has recently held a TS/SCI security clearance.

Preferred Qualifications

• Experience working in classified facilities and engaging in federal intelligence programs.
• Experience as an Intel Analyst AND in a SOC, IR, or specialized cybersecurity role.
• Understanding of threat intelligence collection methodologies.
• Excellent verbal and written communication.
• Experience with data analysis and threat intelligence platforms.

Additional Information

• This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days. Unless otherwise noted, employees are required to work and reside in the state of California. Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
• Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!
• Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
• The primary work location for this position is Rosemead, CA. However, the successful candidate may also be asked to work for an extended amount of time at an alternate work location.
• Position will require up to 20% traveling and being out in the field throughout the SCE service territory.
• This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
• Relocation may apply to this position.