Cybersecurity Analyst

Our purpose is to make life better for people by delivering water for life. Our mission is to provide customer with high-quality water and services at a reasonable cost while promoting the preservation of watershed lands and aquifers. Our vision is to be an innovative water utility that sustains life, strengthens our communities and protects natural resources for future generations. Our STARS values are Service, Teamwork, Accountability, Respect and Safety.

About the RWA:

At the South-Central Connecticut Regional Water Authority (RWA), we provide more than just water—we deliver life-sustaining resources to nearly 430,000 consumers every day. As a nonprofit public corporation driven by our commitment to excellence and community, we take pride in being responsible stewards of over 28,000 acres of watershed land, ensuring the sustainability of our environment for future generations. Guided by the principles of Conscious Capitalism, we believe in the power of business to make a positive impact on the region we serve.

When you join RWA, you have more than a job, you have a purpose and will become part of a team that values integrity, environmental stewardship, and community service. You’ll work with purpose, knowing that every drop of water we deliver makes a difference, and that our customers trust us to uphold the highest standards of reliability, sustainability, and care.

JOB SUMMARY:

Under general supervision from the Enterprise Security Manager, develops cyber-intelligence solutions to prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce, and web-based systems. Supports technologies deployed across application, network/perimeter, data, endpoint, identity & access, and mobility domains. Research based on security logs for attempted or successful efforts to compromise systems security and designs countermeasures. Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration, or denial of access to information and systems.

Responsibilities:

• Under general supervision, supports RWA Information Security governance, risk management and compliance processes.

• Facilitate security assessments driven by the Technology Leadership team, Enterprise Security Manager and Cybersecurity Governance Team.

• Act as a cyber security liaison between the internal and external Enterprise Information Security teams and the supporting RWA business functions including SCADA team, RWA IT team and other functions.

• Assist in the speed to delivery and education while aligning teams to Information Security policies, procedures, and standards.

• Review centralized event logs for cyber related events, remediate when necessary.

• Collaborate and build partnerships that will drive the reduction of residual risk and improve the overall Information Security posture for the RWA by implementing security protocols and initiatives in the cyber security roadmap.

• Identify and execute upon opportunities and incorporate process improvements in the cyber arena.

• Lead key enterprise security project activities through meeting facilitation, managing scope, managing issues and risks, and communicating progress.

• Facilitate security assessments driven by the leadership team, Enterprise Security Manager and Cybersecurity Governance Team.

• Assist in internal and external audits as assigned.

• Assist in audit vulnerability remediation plan and recommendations.

• Keep enterprise assets such as servers, switches and firewalls updated with proper firmware version -Configure partition on new servers for OS according to cybersecurity best practices.

• Assist with network topology and security drawings to reflect accurate RWA network and security infrastructures.

• Create and apply security addresses and groups for policies on firewalls in order to reduce potentially malicious traffic into the RWA network.

• Create VLANs and trunks on switches as part of supporting RWA network and cybersecurity operations.

• Create cyber news flyers via researching articles and other useful sources of information to deliver generalized cyber best practices, as well as things to be on the lookout for, to RWA employees.

• Organize Cyber Governance meetings with actions that drive cyber security best practices.

• Coordinate phishing exercises and retarget users after phishing exercises – training users and providing them with clear guidance on what to look out for so as to avoid future phishing emails.

• Create and test standard operating procedures for cyber-related tasks. Should be clear and concise enough to be repeated by others not knowledgeable about the procedure.

• Strive to improve cybersecurity knowledge. This could include studying for certifications or delving deeper into research on day-to-day cyber tasks.

• Under the guidance of technology leadership team and enterprise security manager enable SOC (Security operations center) functions.

QUALIFICATIONS:

Educational Requirements:

• Bachelor’s degree in computer science or related field

• Industry certifications such as: CompTIA Security+, GIAC, CCCA, CISSP, certifications preferred

Experience/Skills/Abilities:

• Proficiency in network protocols, operating systems, security tools (firewalls, intrusion detection systems, SIEM), scripting languages, and data analysis techniques

• Ability to analyze complex data, identify patterns, and draw accurate conclusions about potential threats

• Effectively troubleshoot security incidents and develop solutions to address vulnerabilities

• Clearly communicate security risks and recommendations to both technical and non-technical audiences

• 1-3 years working as a Cyber Security professional.

Why Join the RWA?

• Be part of a forward-thinking organization that values innovation, collaboration, and continuous improvement

• Enjoy opportunities for career growth and professional development

• Competitive benefits package

The RWA’s comprehensive benefits package includes:

• Medical, dental, vision, and life insurance

• Generous paid time off

• Short-term and long-term disability coverage

• 401k and tuition reimbursement plans

• Wellness Program & Incentives

South Central Connecticut Regional Water Authority (SCCRWA) will not discriminate or permit discrimination against any person or group of persons on the basis of race, color, religious creed, age, marital status, national origin, ancestry, sex, gender identity or expression, sexual orientation, intellectual disability, mental disability or physical disability including, but not limited to, blindness, (unless such disability, even with reasonable accommodation, prevents the applicant from being able to perform the work involved), or in any manner prohibited by the laws of the United States or of the State of Connecticut. Further SCCRWA will not retaliate against or condone retaliation against any person or group of persons who oppose actions, treatment or conduct that they believe to be discriminatory.