Team Lead, Cyber Intelligence and Deterrence Operations
Description
Team Lead, Cyber Intelligence and Deterrence Operations
Work location(s): Georgia Power Corporate Headquarters in Atlanta, GA or Alabama Power Corporate Headquarters in Birmingham, AL
POSITION OVERVIEW
Do you want to develop novel intelligence on well-resourced cyber threats while protecting US critical infrastructure systems?
A top U.S. energy company seeks an experienced cybersecurity professional to join our cybersecurity operations team in a technical leadership role. The candidate will develop and implement solutions that support advanced threat detection and deterrence of cyber adversaries. The focus will be primarily on external cyber threats. The selected candidate will be charged with 1) advancing technical capabilities and projects, 2) guiding other team members in their assigned development and operational tasks, 3) coordinating projects with other company stakeholders.
The Team Lead will leverage his/her experience with threat analysis and cybersecurity engineering, overseeing the work of a small team, and managing projects. The successful applicant will be expected to successfully team with other threat intelligence stakeholders to identify and mitigate risk in both the technology and human domains. The Team Lead develops and executes a mix of custom and commercial intelligence collection capabilities and works with the cyber threat intelligence team to deliver actionable recommendations to analysts and executive leadership. Such capabilities may include deception, misinformation, internal tripwires, and adversary engagement. The position will report to the Manager of Advanced Threats, Intelligence, and Deterrence.
JOB RESPONSIBILITIES
Lead the day-to-day innovation, process, capability development and operations of the team
Develop operational strategies for cyber deterrence, including honeypots, deception campaigns, internal controls, and countermeasures
Develop prototype capabilities for deterrence within an Operational Technology (OT) environment, to include advanced laboratory development for testing
Research, collect, and analyze strategic and operational intelligence on cyber threats to the energy sector and Southern Company
Contribute to the deployment of alerting solutions based on cyber deterrence activities and integrate those alerts with existing Security Operation Center (SOC) processes
Communicate alerts on potential cyber intrusions to other teams and stakeholders
Support the definition, monitoring, and reporting of effectiveness metrics on an ongoing basis
REQUIREMENTS AND QUALIFICATIONS
BA/BS in computer science, technology, engineering or cyber security-related field or equivalent experience
Minimum of ten (10) years of relevant professional security experience, or six (6) years with Master's degree
Prior experience working in a cybersecurity operations environment
Independent thinker with strong analytical and technical problem-solving skills
Understanding of attack signatures, tactics, techniques and procedures associated with advanced cyber threats
Experience with digital forensics tools to determine adversary actions taken during a cyber intrusion event
Understanding of best practices for monitoring network environments for indications of compromise, including command and control
Broad knowledge of IP networking protocols and experience performing network traffic analysis
Knowledge of Windows operating systems (file system structure, registry keys, scheduled tasks, processes, services, memory management, data storage, etc.)
Experience leading the enterprise deployment of new security tools in an IT environment
Demonstrated ability to achieve timely project execution while adhering to cyber security governance and architecture processes
#LI
Disclaimer:
This information describes the general nature and level of work performed by employees in this job. The description is not designed to be a comprehensive inventory of duties, responsibilities and qualifications required in the job. Reasonable accommodations may be made to qualified disabled individuals for performance of essential duties and responsibilities.
Southern Company (NYSE: SO ) is America's premier energy company, with 46,000 megawatts of generating capacity and 1,500 billion cubic feet of combined natural gas consumption and throughput volume serving 9 million customers through its subsidiaries . The company provides clean, safe, reliable and affordable energy through electric operating companies in four states, natural gas distribution companies in seven states, a competitive generation company serving wholesale customers across America and a nationally recognized provider of customized energy solutions, as well as fiber optics and wireless communications . Southern Company brands are known for excellent customer service, high reliability and affordable prices that are below the national average. Through an industry-leading commitment to innovation, Southern Company and its subsidiaries are inventing America's energy future by developing the full portfolio of energy resources, including carbon-free nuclear, 21st century coal, natural gas, renewables and energy efficiency, and creating new products and services for the benefit of customers. Southern Company has been named by the U.S. Department of Defense and G.I. Jobs magazine as a top military employer, recognized among the Top 50 Companies for Diversity by DiversityInc, listed by Black Enterprise magazine as one of the 40 Best Companies for Diversity and designated a Top Employer for Hispanics by Hispanic Network. The company has earned a National Award of Nuclear Science and History from the National Atomic Museum Foundation for its leadership and commitment to nuclear development and is continually ranked among the top energy companies in Fortune's annual World's Most Admired Electric and Gas Utility rankings. Visit our website at www.southerncompany.com .
Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.
Job Field: Information Technology
Job Type: Standard
Primary Location: Georgia-Metro Atlanta-Atlanta
Operating Company: Southern Company Services
Other Locations: Alabama-Metro Birmingham/Eastern AL-Birmingham
Job Type: Standard
Travel (Up to...): Yes, 25 % of the Time
Work Location(s):
Georgia Power Headquarters - 241 Ralph McGill Blvd. NE (241ATLANTA)
241 Ralph McGill Blvd. NE
Atlanta, 30308
APC Corporate Headquarters - 600 North 18th Street (600BIRMINGHAM)
600 North 18th Street
Birmingham, 35203
Req ID: SCS2010416