Associate Cybersecurity Systems Engineering Analyst - Data Protection

Hybrid Associate role in cybersecurity systems engineering supporting detection and correlation in a 24x7 CSOC.

Responsibilities

• Support content generation for a Global Security Information and Event Management (SIEM) environment, including ESM, Oracle, connector appliances, SmartConnectors, Logger appliances, and Windows and Linux servers, plus network and security devices.
• Perform functional testing to maintain operability of the cybersecurity tool suite; coordinate with the cyber defense team to manage updates for rules and signatures used by specialized defense applications.
• Identify, develop, and deploy SIEM content and events for an evolving infrastructure, including work with dashboards, active channels, reports, rules, filters, trends, metrics, and active lists.
• Use knowledge of ongoing and emerging cyber threats involving network and endpoint vulnerabilities to define criteria for event and alert generation and correlation.
• Track cyber threat actors and campaigns using technical analysis and open source/third-party intelligence.
• Research and monitor new exploits and emerging cyber threats.
• Help establish, enhance, and continuously improve correlation rules, alerts, searches, reports, and responses aligned to supported cybersecurity tool suites.
• Assist with ongoing maintenance such as patching and upgrades, configuration, and operation of cybersecurity tools including Endpoint/Antivirus, SIEM loggers and connectors, and network analysis and defense products.
• Enhance and tune event outputs and correlation rules to reduce false positives; ensure the supported product set is deployed across the entire threat surface.
• Provide 24x7 systems engineering coverage for escalations on a rotating shift basis.

Requirements

• High School/GED
• Minimum 2 years related work experience

Technologies

• Global Security Information and Event Management (SIEM)
• ESM, Oracle
• Connector appliances, SmartConnectors, Logger appliances
• Windows and Linux
• Endpoint / Antivirus
• SIEM loggers and connectors
• Windows and Linux command line scripting
• NIST Cybersecurity Framework

Application Deadline

Please submit your application by 11:59 PM on Saturday, September 19, 2026.

Working Conditions

• Hybrid Mobility Classification: work performed both remote and onsite after onboarding
• Hybrid employees must live within a reasonable commute to a Duke Energy facility, no greater than 50 miles one way
• Expected to report to assigned facility as required and directed by the manager, on average 3 full workdays per regular workweek
• Office Environment

Location

• Charlotte, NC (hybrid)

Travel, Relocation, Union, Sponsorship

• Travel requirements: Not required
• Relocation assistance: No
• Represented/Union position: No
• Visa sponsored position: No. Requires ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Specific Requirements

• HS/GED: 2 yrs work experience required
• Associates: 0 yrs work experience preferred
• Bachelors: 0 yrs work experience preferred