FirstEnergy at a Glance

We are a forward-thinking electric utility powered by a diverse team of employees committed to making customers’ lives brighter, the environment better and our communities stronger.

FirstEnergy (NYSE: FE) is dedicated to safety, reliability, and operational excellence. Headquartered in Akron, Ohio, FirstEnergy includes one of the nation's largest investor-owned electric systems, more than 24,500 miles of transmission lines that connect the Midwest and Mid-Atlantic regions, and a regulated generating fleet with a total capacity of 3,780 megawatts.

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]

About the Opportunity

This is an open position with FirstEnergy Service Co., a subsidiary of FirstEnergy Corp. [SC00]

This position’s base reporting location is in Wadsworth Township, Ohio, and reports to the Manager of Incident Response. This position is eligible for FirstEnergy’s Flexible Workplace program and may be performed 100% remote with infrequent multi-day trips to the Akron, Ohio area as needed (a few times per year). The Cyber Incident Response Analyst works closely with the security operations center and other cyber security teams to respond to threats and incidents across all FirstEnergy subsidiaries and business units. This person is knowledgeable in current cyber security response strategies, has strong understanding of one or more response-related technical disciplines (e.g., complex log analysis, host forensics, NetFlow analytics, etc.), and can work accurately and with precision while under pressure.

This position also works to partner closely with multiple departments, including but not limited to corporate Risk, Legal, Communications, Compliance, and Information Technology. This person can successfully maintain, improve, and execute a cyber security incident response plan, while fostering a collaborative and inclusive work environment by using FirstEnergy’s core values and behaviors as guideposts.

Responsibilities Include:

Respond to cyber-related and cyber-adjacent security issues in a dynamic, 24/7 environment with a rotating on-call component

Execute incident response plans to address threats and incidents, while taking careful notes and following strong procedural control

Supports and participates in incident response exercises at both the tactical and strategic levels

Assists in the development and maintenance of incident response practices and procedures by identifying problems/needs, evaluating trends, analyzing lessons learned, and anticipating requirements.

Preserves evidence and complies to regulatory requirements by implementing security and control structures.

Work with the Emergency Operations Center to align cyber incident response to the overall FirstEnergy emergency plan for all-hazards response

Liaison to external peer organizations for knowledge exchange.

Maintains a high-level of technical knowledge of platforms utilized throughout the environment

Not afraid to roll up your sleeves when needed and believe that collaborative approach is key to solving problems and improving our systems and people.

Accomplish annual Cyber Security and company performance objectives.

Champions FE’s Core Values Behaviors by personal example.

Qualifications include:

A Bachelor’s Degree in cyber security, cyber forensics, or a related discipline. Candidates without a bachelor’s degree but with multiple years of experience or suitable alternative credentials (e.g., certifications, lesser degrees, etc.) will be considered.

Ability to identify and assess the severity and potential impact of risks, threats, and incidents. Communicate risk assessment findings to risk owners outside the cybersecurity program in a way that consistently drives objective, fact-based decisions about risk that optimize the trade-off between risk mitigation and business performance.

Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate option

An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.

Strong decision-making skills during emergency and crisis situations.

Ability to handle and protect with highly confidential information.

Familiarity with the FEMA National Incident Management System (NIMS) and the Incident Command Structure (ICS) models, holding a FEMA Professional Development Series Certificate is a plus

Strong knowledge of disaster recovery and business continuity practices

Strong knowledge of IT architectures, processes, policies, and tools.

Knowledge of core Microsoft enterprise applications and services such Active Directory identity and access management services, file/print services and other associated technologies.

Experience with the effective use of Microsoft Office Suite (Outlook, Word, Excel, and PowerPoint).

Role model of FirstEnergy’s core values and behaviors; unwavering integrity and trustworthiness

Level Requirements

II - Qualifications at Level II include all the above, plus a minimum of 2 years professional experience in a cyber or related IT function

III - Qualifications at Level III include all the above, plus a minimum of 4 years professional experience in a cyber or related IT function

IV - Qualifications at Level IV include all the above, plus a minimum of 7 - 10 years professional-level experience required. experience and subject matter expert knowledge in at least one major cyber security discipline required.

V - Qualifications at Level V include all the above, plus a minimum of 10 years professional-level

At FirstEnergy, employees are key to our success. We depend on their talents to meet the challenges of our changing business environment. We are committed to rewarding individual and team efforts through our total rewards philosophy which includes competitive pay plus incentive compensation, a company-sponsored pension plan, 401(k) savings plan with matching employer contribution, a choice of medical, prescription drug, dental, vision, and life insurance programs, as well as skills development training with tuition reimbursement. Please visit our website at www.firstenergycorp.com to learn more about all of our employee rewards programs. FirstEnergy proudly supports workforce diversity. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, or status as a qualified individual with a disability. No recruiters or agencies without a previously signed contract. Unable to sponsor or transfer H-1B visas at this time.

Safety

Safety is a core value for FirstEnergy and is essential to all of our business activities. We ensure employees have the tools, information, and processes to perform their duties in a manner that assures safety for themselves, their co-workers, our customers and the public. Our goals are to provide a safe work environment, to maintain an accident-free, injury-free workplace, and to promote and maintain public safety. To meet these goals, we dedicate ourselves to achieving world-class safety standards.