Description

We're powering a cleaner, brighter future.

Exelon is leading the energy transformation, and we're calling all problem solvers, innovators, community builders and change makers. Work with us to deliver solutions that make our diverse cities and communities stronger, healthier and more resilient.

We're powered by purpose-driven people like you who believe in being inclusive and creative, and value safety, innovation, integrity and community service. We are a Fortune 200 company, 19,000 colleagues strong serving more than 10 million customers at six energy companies - Atlantic City Electric (ACE), Baltimore Gas and Electric (BGE), Commonwealth Edison (ComEd), Delmarva Power & Light (DPL), PECO Energy Company (PECO), and Potomac Electric Power Company (Pepco).

In our relentless pursuit of excellence, we elevate diverse voices, fresh perspectives and bold thinking. And since we know transforming the future of energy is hard work, we provide competitive compensation, incentives, excellent benefits and the opportunity to build a rewarding career.

Are you in?

PRIMARY PURPOSE OF POSITION

The Associate Cyber Security Vulnerability Assessment Analyst will assist with conducting vulnerability assessments on web-based applications, thick client applications, networks, system infrastructure, etc. and recommend appropriate mitigations and/or remediation efforts. This is a hands-on role requiring technical skills across a wide range of IT systems, applications, and infrastructure. This position will also support the vulnerability scanning program and associated infrastructure (currently leveraging Tenable/Nessus).

PRIMARY DUTIES AND ACCOUNTABILITIES

• Perform technical application and infrastructure security vulnerability assessments across a wide range of IT systems, including applications, wireless and wired networks, web services, mobile applications, thick clients, Cloud solutions, etc.
• Support the vulnerability scanning program and Tenable/Nessus administration
• Prepare detailed cyber security vulnerability metrics and reports for internal customers and leadership (routine and ad hoc).

Qualifications

MINIMUM QUALIFICATIONS

• Bachelor's Degree in Computer Science, Information Technology (IT), or a related discipline with 0 to 2 years of experience in cyber security or IT, or equivalent combination of education and work experience.
• Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of basic network protocols (e.g. TCP/IP, UDP, DNS).
• Knowledge of scripting/programming language structures and logic.
• Knowledge of basic system administration, network, and operating system hardening techniques.
• Demonstrated leadership ability.
• Proven analytical, problem solving and technical skills.
• Excellent communication skills.

PREFERRED QUALIFICATIONS

• Relevant security certifications (e.g. Security+, Network+)
• Ability to identify systemic security issues based on the analysis of vulnerability and configuration data.
• Knowledge of penetration testing principles, tools, and techniques.
• Knowledge of system and application security threats and vulnerabilities (e.g. OWASP Top 10, DDos).
• Knowledge of system administration concepts for Unix/Linux and/or Windows operating systems.
• Knowledge of host/network access control mechanisms (e.g., access control list).
• Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).