Senior Security Analyst - Cybersecurity Operations

Overview Are you passionate about safeguarding critical infrastructure and operational systems from cyber threats? Tacoma Power invites you to explore this opportunity. We are seeking a highly skilled Senior Security Analyst to join our Cybersecurity Operations team within the Utility Technology Services (UTS) section. You will help ensure the confidentiality, integrity, and availability of Tacoma Public Utilities' (TPU) digital assets and operational technology (OT) systems. Your leadership in threat detection, incident response, and security operations will support TPU’s ability to deliver safe, reliable, and resilient utility services to the communities we serve. Job Responsibilities Monitor and Analyze Security Events: Lead daily threat monitoring, triage, and analysis using SIEM tools to detect and assess cybersecurity threats across TPU’s systems. Investigate and Respond to Incidents: Conduct end-to-end incident response and root cause investigations, correlating data from tools such as SIEM, EDR, and threat intelligence platforms to contain and resolve security events. Enhance Detection Capabilities: Develop, tune, and refine detection logic and correlation rules in collaboration with engineering teams to improve alert quality and reduce false positives. Proactively Hunt for Threats: Perform threat hunting using behavioral analysis, anomaly detection, and intelligence sources to identify threats not captured by automated systems. Manage Endpoint Security Tools: Administer and optimize endpoint detection and response (EDR) solutions and OT network visibility, detection, and alerting platforms, ensuring accurate alerting, reliable functionality, and strong platform performance. Collaborate with Stakeholders: Communicate with internal teams and business units during investigations to gather context, validate findings, and coordinate incident resolution. Support Regulatory Compliance (CIP): Maintain assigned CIP responsibilities by supporting documentation, audit readiness, and evidence gathering to ensure compliance with security standards. Qualifications Minimum Education: Bachelor's degree in information technology, cybersecurity or directly related field Minimum Experience: 4 years of progressively responsible information technology experience related to assignment Licensing, Certifications And Other Requirements: Security+ or related certification (GIAC GCIA, GIAC GCIH, CISSP) As Assigned: Washington State Driver's License Equivalency: 1 year of experience = 1 year of education Knowledge & Skills Expertise with SIEM platforms (e.g., LogRhythm, Splunk) Experience managing EDR platforms (e.g., Carbon Black, CrowdStrike) Experience managing OT network visibility & detection platforms (e.g., Nozomi, ClarOTY, Dragos) Experience in conducting security investigations and incident response activities Strong understanding of MITRE ATT&ACK, threat modeling, and TTP analysis Familiarity with scripting for automation (e.g., Python, PowerShell) Strong soft skills and customer service experience Incident response leadership in enterprise environments Certifications: Security+, GIAC GCIA, GIAC GCIH, or equivalent Experience with NERC-CIP regulatory standards Physical Requirements & Working Conditions Positions typically require remaining in a stationary position for extended periods with ability to access office equipment Constant operation of a computer and related tools Communication and the exchange of information with others Occasionally exerting up to 10 pounds of force to move objects Pay Details Annual Salary $118,560.00 - $166,920.00 Apply Interested individuals should apply online. Please attach a detailed resume that includes job experience, major responsibilities and accomplishments related to this position. Reference checks will be conducted on final candidates and appointment is subject to passing a background check. #J-18808-Ljbffr Tacoma Power