Cybersecurity Specialist at Northwest Natural Holding in Portland, OR

Job description

Cybersecurity Specialist Non-Union Position Security Operations and Identity Access Management; Portland, Oregon (US-OR) Hybrid schedule available for Oregon & Washington residents. Regular FT, Exempt Posting # 5743 About Us: At NW Natural, we offer more than rewarding career opportunities and a vibrant, inclusive work culture. We invite you to join us in providing safe and reliable utility services and renewable energy to better the lives of the communities we serve. Our vision is to be the leader in service excellence, innovation and environmental stewardship for our customers, while building on our strengths as a trusted energy provider and environmental leader for our industry. In addition to environmental stewardship, we’re also deeply committed to Diversity, Equity and Inclusion at NW Natural. Our DEI Council started 21 years ago, and today we continue to foster a culture where all employees can experience a sense of belonging, shared purpose and possibility. NOTE: This hybrid position is based at our headquarters in downtown Portland, Oregon. Candidates must reside within commuting distance of the office or be willing to relocate to the Portland metropolitan area. Employees are required to work onsite Tuesdays through Thursdays each week, with remote work flexibility on Mondays and Fridays, subject to business needs. This schedule supports collaboration, connection, and team engagement while providing flexibility for focused remote work. Position Summary: You’ll be a member of the Security Operations Team and collaborate with our team on projects and operational work, as part of our security program, focusing on vulnerability management. This a key role in a technology organization maturing its processes and modernizing its technology and you will work closely with Network, Cloud, and other technical teams. The primary purpose of this position is to ensure Information Technology & Services (IT&S) Department is compliant with state and federal regulations by identifying, evaluating, prioritizing, monitoring, and reporting on the effectiveness of operational controls within Information Technology (IT) and Operational Technology (OT) environments. Your responsibilities would include people, process, and technology. This position will be based at our office in downtown Portland, OR. Per regulatory requirements, this role requires US citizenship due to the potential need for access to restricted cybersecurity-related information. Proof of US citizenship will include visual verification of the person’s US birth certificate, certificate of naturalization, US passport, or US passport ID card during the onboarding process. Essential Duties & Responsibilities: Vulnerability Management Identify new vulnerabilities in our environment using tools such as Windows Defender, Nessus Professional, Tenable, System Center Configuration Manager, Dragos, and Intune Evaluate and prioritize vulnerabilities Monitor vulnerability remediation to confirm compliance with defined timelines Develop reports on vulnerabilities in order to identify trends and communicate changes Provide subject matter expertise to both project teams and operational teams Implement vulnerabilities management best practices Conduct false positive validation Work with managed service providers to implement new configurations, apply product/content updates, and inform the analysis of security alerts with vulnerability management context Develop routine processes and scripts for identifying and remediating issues with software agents Troubleshoot issues in vulnerability management tools (e.g., scan engines down, agents not reporting to console, credential failures) Conduct periodic health checks Own remediation tracking process Manually validate vulnerabilities and remediation Develop and report on key performance indicators to show the effectiveness of our vulnerability management processes as well as our managed service provider Security Consulting Research, evaluate, desi