Cybersecurity Analyst (II or III)

Cybersecurity Analyst II: The starting salary range for this position is $89,200 - $111,500 (based on qualifications).  With tenure and strong performance in this role an employee may earn up to a maximum of $133,800, annualized.

Cybersecurity Analyst III: The starting salary range for this position is $103,600 - $129,500 (based on qualifications).  With tenure and strong performance in this role an employee may earn up to a maximum of $155,400, annualized.

Introductory Period: New employees holding regular positions must complete an introductory period of twelve months.

In addition to competitive wages Chelan PUD employees also enjoy outstanding benefits which include zero cost employer funded medical, dental, and vision healthcare benefits, access to the employee assistance program, and a VEBA health reimbursement account.

Washington state retirement PERS participation and optional 457 plan participation with an employer matching 401(a) plan.

Leave, life & disability benefits including paid leave starting at 21 days per calendar year up to 35 with tenure, 12 paid holidays per calendar year, paid jury duty, short-term disability & long-term disability, and basic life, AD&D, and optional voluntary life.

The work life benefits include optional flexible spending accounts for healthcare and dependent care, educational assistance, various rewards and recognition programs and position specific stipends.

For more explanation of the district benefits please visit our benefits website www.mychelanpudbenefits.org.

This position will be filled at the Cybersecurity Analyst II or III level, contingent upon the experience of the selected applicant. 

Cybersecurity Analyst II

Overview
The Cybersecurity Analyst II continuously monitors systems and environments—including on-premises, cloud, and endpoints—evaluates threats, responds to events, and detects potential breaches. They implement and maintain cybersecurity solutions, perform security analysis and audits, and support the identification and remediation of vulnerabilities. The role also includes staying current on developments in the cybersecurity threat landscape, contributing to secure configuration efforts, and collaborating with cybersecurity team members and other IT staff to reduce cybersecurity risk to the District.

Responsibilities

• Cybersecurity Analysis, Detection and Response: Continuously monitor network, endpoint, and cloud environments for anomalies, intrusions, breaches, and illegal or suspicious activities. Use tools such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Network Access Control (NAC), Intrusion Detection and Prevention Systems (IDPS), and other advanced technologies—including AI-enhanced detection and automation tools—to support effective analysis. Investigate potential violations of security procedures and document findings for communication with the Manager of Cybersecurity. Participate in incident response efforts by identifying indicators of compromise (IOCs), following documented procedures, and escalating to senior team members as needed. Analyze third-party threat intelligence and advisories from vendors and official sources, such as CISA, to identify relevant risks and share findings with cybersecurity team members and stakeholders. Use endpoint tools to verify compliance with cybersecurity baselines, standards, and policies. Provide cybersecurity input on defined technology initiatives by evaluating routine risks and recommending standard security practices under the guidance of senior cybersecurity staff.
• Cybersecurity Vulnerability and Threat Mitigation: Perform regular vulnerability assessments and security analysis of technology systems and endpoints. Conduct risk assessments in alignment with established team guidelines and recommend standard mitigations based on risk level. Prepare reports showing identified risks, priorities, and remediation status, and communicate findings to system owners and appropriate stakeholders. Use endpoint tools to verify compliance with cybersecurity baselines, standards, and policies, and ensure timely remediation when security compliance deviations are detected. Apply security patches to cybersecurity systems to mitigate vulnerabilities promptly while minimizing impact to business operations. Perform routine audits of access controls and sensitive data management practices to ensure the principle of least privilege is enforced and data is classified and encrypted appropriately.
• IT Security System and Program Administration: Perform configuration changes to cybersecurity systems—such as firewalls and email gateways—using established guidelines to maintain functionality and a high level of security. Address cybersecurity cases escalated from the Service Desk, including issues related to security events, authentication, access, email filtering, and internet connectivity. Collaborate with higher-level Analysts, Engineers, or Architects to resolve more complex escalated issues. Administer Identity and Access Management (IAM) systems, including authentication services and certificate management. Create and maintain documentation on security procedures in accordance with team standards. Support the user awareness program by facilitating training, sharing information, and conducting phishing assessments to address emerging threats, AI-driven attacks, and phishing tactics. Update the Cybersecurity Team SharePoint site with relevant content, including cybersecurity training links and informational resources. Deliver regular cybersecurity communications to District employees to raise awareness of common and emerging threats and promote security-minded behavior.
• Maintain regular and predictable attendance: Perform related duties and responsibilities as required. Comply with District policies. Complete all required training. Maintain a working knowledge and comply with District safety procedures and specific safety requirements of this position, and those in accordance with applicable provisions of the Revised Code of Washington (RCW) and Washington Administrative Code (WAC).
• As a secondary function, drive a motorized vehicle while conducting business on behalf of the District.

Overtime exemption
Exempt

Qualifications

Education

• Bachelor's Degree (B.S., B.A.) in Computer Science or a related field is required. 
• Equivalent experience (year for year) may substitute for required education. 

Experience

• 2+ years of experience performing cybersecurity analysis in an enterprise environment or in a related area is required. 
• District IT or utility operational industry experience is desired. 

Licenses and Certifications

• Industry-recognized cybersecurity certifications—such as GIAC Certified Enterprise Defender (GCED), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC), or other similar certifications—are preferred. 

Skills and Abilities
A fully skilled incumbent will have the following knowledge skills & abilities: 

• Technical knowledge of computer hardware, networks, security, and support 
• Knowledge of Networking, including wired and wireless, routing and switching, DNS, NTP, SMTP, and SNMP. 
• Knowledge of IT infrastructure technologies, including SANs, VMWare, Citrix, and load balancers. 
• Knowledge of Operating Systems commonly used in businesses such as Windows (both workstation and server OS) and Linux. 
• Knowledge of Enterprise Firewalls 
• Knowledge of Enterprise Email Gateway systems 
• Advanced knowledge of system analysis, customer needs assessment, and requirements gathering techniques and related documentation standards. 
• Knowledge of business software applications and systems in use at the District/ other utility providers. 
• Knowledge of District software and process design standards. 
• Knowledge of software suites. 
• Knowledge of Enterprise Security Monitoring systems 
• Knowledge in threat hunting and incident response 
• Ability to communicate logically and clearly, both orally and in writing 
• Active Learning — Understanding the implications of new information for both current and future problem-solving and decision-making. 
• Active Listening — Giving full attention to what other people are saying, taking time to understand the points being made, asking questions as appropriate, and not interrupting at inappropriate times. 
• Analytical and problem-solving skills
• Conceptual and critical thinking skills 
• Ability to constantly learn and effectively apply new technologies while maintaining prior competencies. 
• Troubleshooting — Determining causes of operating errors and deciding what to do about it. 
• Ability to document work, steps to reproduce and resolve issues, and represent all facets of an issue in a clear way. 
• Critical Thinking — Using logic and reasoning to identify the strengths and weaknesses of alternative solutions, conclusions or approaches to problems. 
• Operation and Control — Controlling operations of equipment or systems. 
• Ability to implement, administer, and maintain an enterprise network infrastructure. 
• Ability to monitor and analyze network security 
• Ability to perform cybersecurity threat hunting and analysis 
• Ability to respond to cybersecurity events and incidents 
• Time Management — Managing one's own time 
• Effective communication and interpersonal skills to maintain positive and responsive relationships with end users as well as vendors and contractors. 
• Ability to mentor and train lower-level employees. 
• Security Analysis – Analyzing security of technology systems to determine risk and then recommending mitigations 
• Knowledge of AI- and machine learning-based tools used in cybersecurity for detection, automation, and risk prioritization. 
• Knowledge of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms. 
• Knowledge of security considerations in hybrid and cloud-native environments (e.g., AWS, Azure, M365). 
• Must be proficient in reading, writing and speaking English.

Pursuant to the North American Electric Reliability Corporation (NERC) standards, Chelan County Public Utility District #1 conducts background screening of personnel who have access to the District's critical physical and/or cyber assets.

The statements contained herein reflect general details as necessary to describe the principal functions for this job, the level of knowledge and skill typically required, and the scope of responsibility. This should not be considered an all-inclusive listing of work requirements.  Individuals may perform other duties as assigned, including work in other functional areas to cover absences or relief, to equalize peak work periods or otherwise to balance the workload.

As part of its recruiting process, Chelan PUD may engage a third-party vendor to perform previous employment verification, education verification, and reference checking. 

Chelan PUD is an Equal Employment Opportunity employer.

 We value diversity at all levels of the organization. All qualified applicants will receive consideration for employment without regard to any protected classifications as defined by law.

EEO Law Posters can be found on the main Careers page in English and Spanish. 

Chelan PUD will not be offering any work visa sponsorship for this role.

Pay Transparency Nondiscrimination Provision

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-I.35(c)