[ref. d45788518] Lead Cybersecurity Engineer - Allentown

As one of the largest investor-owned utility companies in the United States, PPL Corporation (NYSE: PPL), is committed to creating long-term, sustainable value for our 3.5 million customers, our shareowners and the communities we serve. Our high-performing regulated utilities — PPL Electric Utilities, Louisville Gas and Electric, Kentucky Utilities and Rhode Island Energy — provide an outstanding experience for our customers, consistently ranking among the best utilities in the nation.

PPL is a positive force in the cities and towns where we do business, providing support for programs and organizations that empower the success of future generations by helping to build and maintain strong, diverse communities today.

Overview:

IT Cybersecurity also develops systems to monitor and respond to attacks against our systems, provides educational awareness to the corporation on security best practices, and ensures data sharing relationships with third parties securely protect PPL information.

#LI-Hybrid

Responsibilities:

• Develop and maintain policies, procedures and/or standards for the health of cybersecurity solutions
• Perform Tool Health Assessments to identify both security and operational related issues
• Manage, configure, and monitor tools and underlying infrastructure to ensure patches and/or updates are applied in accordance with policy and procedure
• Tune configurations to maximize efficiency while accounting for stakeholder needs.
• Research and evaluate alternative security solutions to determine feasibility and suitability
• Create metrics to report on the overall health of security solutions
• Establish relationships and communicate with vendors to obtain timely support and resolve issues
• Conduct regular reviews of relevant applications and underlying infrastructure to identify areas for improvement.
• Assist relevant parties on identified gaps in the technology stack based on analysis and execute strategies to mitigate/address the risk.
• Identify and apply strategies to optimize resource utilization and minimize cost
• Collaborate with cross-functional teams to ensure the solutions are providing value and operating in accordance with expectations
• All other duties and projects as assigned.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, and/or a related field or an equivalent level of work related experience.

• A minimum of 7+ years of cybersecurity experience in the configuration and support of cybersecurity related applications and infrastructure
• Proficiency in completing tool health assessments including performance, functionality, security, compatibility, user experience, and maintenance assessments.
• Experience completing necessary documentation to comply with Configuration and Change Management processes
• Experience in managing and configuring SIEMs, Antivirus, anti-malware, IDS/IPS, endpoint security solutions.
• Experience in consolidating tools and/or standardizing configurations across different environments.
• Experience in establishing relationships with vendors to resolve issues
• Knowledge of various enterprise technology stacks used to build applications in the cloud
• Experience in Security and/or Regulatory Frameworks such as NIST, CIS Benchmarks, SOX, NERC CIP, etc.
• Strong analytical skills to assess risks and vulnerabilities in complex systems.
• Strong leadership, communication, and interpersonal skills.
• Collaborative and effective in cross-functional team environments.

• Certification in Cybersecurity (e.g., CISSP, CISM, etc) is preferred.
• Experience working in Agile teams and have knowledge of Agile principles and practices.
• Experience utilizing the Scaled Agile Framework (SAFe)
• Understanding of data analytics, artificial intelligence, and machine learning concepts
• Proficiency in scripting and automation for security testing.