Cybersecurity Analyst

Golden State Water Company is seeking a Cybersecurity Analyst to provide 24x7 onsite support in San Dimas, California. In this hands-on role, you will help detect, respond to, mitigate, and report cyber threats while protecting the confidentiality, integrity, and availability of company information systems. The position supports the organization’s use of the NIST Cybersecurity Framework and related regulatory compliance activities.

Key responsibilities

• Proactively monitor the environment for new and emerging cyber threats and take steps to mitigate attacks before they occur.
• Independently review, investigate, and respond to real-time security alerts.
• Independently review real-time and historical reports to identify security and/or compliance violations.
• Communicate with senior cybersecurity personnel and IT management regarding critical incidents and strategic security requirements.
• Review system audit logs and logs from other cybersecurity solutions.
• Work with Security Operations Center (SOC) analysts and management to triage and respond to security alerts.
• Coordinate assessment, containment, and eradication with the Incident Response Team.
• Coordinate tuning of preventative and detective security controls to increase fidelity and reduce false positives.
• Manage threat lists (for example, whitelists and blacklists).
• Ensure vulnerabilities are remediated according to established plans, including running internal vulnerability and penetration testing tools as instructed.
• Research and recommend security patches for cybersecurity solutions, including firmware, operating systems, and software.
• Evaluate the security impact of software changes.
• Help monitor vulnerability and threat services to understand current risk and recommend response and mitigation/countermeasure strategies.
• Partner with business units and end users to create and enhance Data Loss Prevention (DLP) rules to expand protection of company data.
• Conduct independent research to provide informed opinions on third-party vendor selections and processes for TableTop cybersecurity exercises across business units.
• Compose or review cybersecurity incident response plans and runbooks, and create or verify automation methods for plan and runbook implementation.
• Recommend updates to IT security policies and procedures.
• Perform other related duties as required.

Required and preferred qualifications

• High School Diploma or equivalent required.
• Minimum of three years of experience in information technology, information technology security, or cyber security-related fields required.
• At least one year of cyber security experience desired.
• Experience desired in cyber security incident collection, analysis, and reporting process procedures.
• Hands-on experience desired supporting and maintaining information technology and cyber security tools and technologies, including endpoint protection, vulnerability and patch management, desktop management, mobile security, and alerting and monitoring utilities.
• Security+ and/or Network+ certifications desired.
• Fundamental understanding of computer networking (TCP/IP).
• Hands-on experience supporting Microsoft Windows and Linux operating systems and platforms.
• Knowledge of cyber threats and vulnerabilities, including adversarial tactics, techniques, and procedures.
• Scripting experience (PowerShell or Python) is a plus.
• Ability to analyze complex information, identify key points, and communicate clearly.
• Ability to produce high-quality work on a timely basis in a fast-paced environment; able to manage multiple tasks with attention to detail.
• Excellent analytical and problem-solving skills, with strong interpersonal skills for interaction with team members and upper management.
• Ability to work independently often with sound judgment and decision making.
• Strong attention to detail, organization, and time management.
• Strong written and verbal communication skills, professionalism, confidentiality, accountability, and ownership.
• Data analysis skills, including advanced features of Microsoft suite and other applicable desktop publishing tools.
• High initiative and self-starter attitude.

Technology and framework exposure

• NIST Cybersecurity Framework
• PowerShell, Python
• Microsoft Windows, Linux
• TCP/IP
• Security+, Network+

Location and scheduling

• San Dimas, CA (onsite)
• 24x7 support required

Benefits

• Medical, dental, and vision plans (Company currently paying 85% of the monthly premium for employees and eligible dependents)
• Paid vacation and sick time
• Twelve Company paid holidays per year
• 401(k) retirement plan
• Defined Contribution Profit Sharing retirement plan
• Life, AD&D, and LTD insurance
• Health savings account
• Flexible spending plans

Compensation

The salary range is USD 97,532 - 165,961 per year. The compensation range provided complies with state-specific laws, and the starting rate depends on factors such as skills, years of experience, education, certifications, and other job-related criteria.

Background check

This position involves access to confidential, private, and sensitive information. The selected individual will be required to allow and pass a background check.