Cybersecurity Analyst II

Overview We are designing the grid of the future! Electric Power Engineers (EPE) is seeking a bilingual Cybersecurity Analyst to be based in our Panama City office. This role serves as the primary cybersecurity resource for the integration and ongoing security operations of Estudios Electricos (EE) into the EPE network. The analyst will function as the boots‑on‑the‑ground security presence for the EE environment, owning all aspects of cyber risk monitoring, threat analysis, incident response coordination, and security policy for that entity. This position reports directly to the EPE Security Manager and is a critical link in EPE's broader enterprise security posture. Responsibilities Estudios Electricos Integration & Security Ownership Lead the cybersecurity workstream for the integration of Estudios Electricos into the EPE network, including asset discovery, risk assessment, and network segmentation planning. Serve as the dedicated security point of contact for all EE systems, users, and environments. Develop and maintain a comprehensive security baseline for EE aligned with EPE enterprise standards. Threat Monitoring & Alert Management Monitor security information and event management (SIEM) platforms, endpoint detection tools, and network traffic for anomalous activity across the EE environment. Triage, investigate, and disposition all security alerts originating from EE systems. Escalate confirmed or suspected incidents to the EPE Security Manager with timely, accurate situational reporting. Risk Analysis & Reporting Conduct ongoing cyber risk assessments of the EE environment, identifying vulnerabilities, threat vectors, and control gaps. Deliver regular threat intelligence briefings and risk status reports to the Security Manager, including critical findings, trending threats, and recommended mitigations. Maintain a risk register for the EE environment and track remediation progress. Incident Response Serve as the on‑site lead for EE incident response activities, coordinating the EE incident response team through detection, containment, eradication, and recovery phases. Develop, maintain, and exercise EE‑specific incident response plans and playbooks. Document all incidents thoroughly and produce post‑incident reports with root cause analysis and lessons learned. Policy Development & Compliance Draft, implement, and enforce cybersecurity policies, standards, and procedures applicable to the EE environment. Ensure EE operations align with EPE enterprise security policies and applicable regulatory requirements. Conduct periodic security awareness training for EE staff. Vulnerability Management Perform and coordinate regular vulnerability scans and penetration testing activities for EE systems. Prioritize and track remediation of identified vulnerabilities in coordination with EE IT staff and EPE engineering teams. Qualifications Required Fluency in Spanish and English (written and verbal) — bilingual communication is essential for this role given the Panama City operating environment and coordination with EPE leadership. Minimum 3 years of experience in a cybersecurity analyst, information security, or related role. Active certification in one or more of the following (or equivalent): CompTIA Security+ CompTIA CySA+ Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Systems Security Certified Practitioner (SSCP) GIAC Security Essentials (GSEC) Demonstrated experience in cyber risk analysis and threat assessment. Hands‑on experience with SIEM platforms, endpoint detection and response (EDR) tools, and network monitoring solutions. Working knowledge of incident response methodologies and the ability to lead a response team through the full IR lifecycle. Familiarity with security policy development and implementation. Strong written and verbal communication skills, including the ability to translate technical findings into executive‑level reporting. Preferred Familiarity with NIST Cybersecurity Framework (CSF), ISO/IEC 27001, or similar frameworks. Experience with network integration projects, including security architecture review and segmentation design. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field. Reporting & Communication Daily: Alert and incident status updates as warranted. Weekly: Threat landscape summary and operational status of the EE environment. Monthly: Formal risk posture report covering vulnerabilities, incidents, policy compliance, and integration milestones. Ad hoc: Immediate escalation of critical threats, active incidents, or significant changes in the EE threat environment. Lead the change! Be a part of an innovative team shaping the grid of the future through advanced energy intelligence. For more than half a century, Electric Power Engineers (EPE) has partnered with power and energy clients across the globe, providing consulting expertise and energy intelligence software solutions for complex engineering and grid modeling challenges. As leaders in the renewables space, we are focused on building a modern, secure, and resilient grid. Join us in making an impact on the communities we serve and the environment in which we live. Together we can transform the future of energy. How We Support You Comprehensive Health & Life Insurance: 100% premium coverage for employees, with partial coverage available for eligible dependents. Opportunity to work on cutting‑edge automation solutions for the power industry. Collaborate with a team of experts in software engineering, renewable energy, and grid technologies. Flexible hybrid work environment with opportunities for professional growth and innovation. EPE is an equal opportunity employer and values diversity in its workforce. Location This position will be located in Panama City, Panama. Travel Occasional travel may be needed (10% or less). EPE is an equal opportunity/AA/Disability/Veteran employer. The EEO is the Law poster, and its supplement are available using the following links: EEOC is the Law Poster. Third‑Party Recruiting Notification EPE does not accept unsolicited resumes from third‑party recruiters. Any unsolicited third‑party resumes forwarded by recruiters to EPE via our career page or to any of our managers or employees will be considered public information, may be treated as a direct application from the person identified in the resume, and will not be eligible for placement fee payment to the agency. EPE will not pay a fee to a third‑party recruiter or agency without a previously signed third‑party agreement and has not coordinated their recruiting activity with the appropriate member of the Talent Acquisition team. #J-18808-Ljbffr