The intent of this job description is to provide a representative summary of the major duties, locations, and responsibilities performed by incumbent(s) in this job. Incumbent(s) may not be required to perform all duties in this description, and incumbent(s) may be required to perform work-related tasks other than those specifically listed in this description. This job description is not a “contract” between the employee and the Authority. The job duties and essential functions may be changed at the discretion of the General Manager.
| General |
| Job Title: | Cyber Security Specialist | Job Code: | P0619 |
| Supervises Directly: | No | ||
| New or Revised: | Revised | Regular or At-Will: | At-Will |
| Date Last Revised: | 7/24/2024 | Exempt or Non-Exempt: | Exempt |
| Compensation Approval Signature: | Union/ Non-Union: | Non-Union | |
| Department Name and Division: | Information Technology-Information Security | Salary Schedule: | Non-Union Salary Range |
| Cost Center Code: | 601015 | Grade: | NU15 |
| Essential Position: | No | Reports To: | Director, Cyber Security Services |
| EEO Code: | Professionals | Work Format | Hybrid |
| Who We Are & What We Do: |
At DC Water, we provide more than 700,000 District of Columbia residents and 24.6 million annual visitors with essential water, wastewater, and stormwater services. DC Water also provides wholesale wastewater treatment services for 1.8 million people in Montgomery and Prince George's counties in Maryland, and Fairfax and Loudoun counties in Virginia. We aspire to be known for superior service, ingenuity, and stewardship to advance the health and well-being of our diverse workforce and communities. To achieve this vision, we commit to our shared mission every day—exceeding expectations by providing high quality water services in a safe, environmentally friendly, and efficient manner.
| Role Description: |
The Cyber Security Specialist facilitates asset tracking and network security incident identification via monitoring, analyzing, detection and response processes. This position also facilitates Identity and access management, on both Operational and Traditional IT Networks. The Cyber Security Specialist, maintains cyber security control applications, and maintains control over IT computing assets. Works with other cyber analysts to respond to cyber security events and incidents, and documents security breaches. Supports management of operational technology (OT) network devices.
| Essential Duties & Responsibilities: |
Supervisory Responsibilities: N/A
Key Working Relationships: Works with the Information Technology Solution Center (ITSC) and Infrastructure teams to enable the delivery and disposal of computing and network assets. Coordinates with the Responsible Property Owners (RPO) in each department to monitor and track issued IT assets. Coordinates with Cyber Security and Operational Technology Team members to respond to Cyber Events. Provides input to internal stakeholders to understand and logically document current and future processes.
| Skills & Qualifications: |
The qualifications listed below are representative of the knowledge, skill, and ability necessary for an
individual to perform each essential responsibility satisfactorily. Reasonable amounts of training are
provided.
Required Skills & Qualifications
| Required Experience: |
| 1-3 year of relative work experience |
| Minimum Education Requirements: |
| Bachelor’s degree or equivalent combination of education and experience. |
| Required Skills: |
| Fundamental understanding of the key functions of Cybersecurity. |
| Fundamental understanding of Cyber Risk mitigation strategies. |
| Fundamental understanding of event and incident flows within a Security Event and Incident (SEIM) system. |
| Ability to define the problem, generate and select alternatives, and implement solutions. |
| Fundamental understanding of Adversarial Tactics, Techniques and Common Knowledge (ATT&CK) framework for Information Technology and Operational Technology Networks. |
| Fundamental understanding of one or more computer programming and/or scripting languages (PowerShell, KQL, Python, etc.) |
| Fundamental understanding of network ports, protocols, and services. |
| Fundamental understanding of host Intrusion Prevention Systems (IPS). |
| Fundamental understanding of network configurations and protocols. |
| Basic understanding of system and network logging events. |
| Outstanding written and verbal communication skills. |
| Required Licenses & Certifications: |
| N/A |
| Required Languages: |
| English |
| Physical Requirements: |
| General Office Conditions |
Preferred Skills & Qualifications
| Preferred Experience: |
| N/A |
| Preferred Education Requirements: |
| N/A |
| Preferred Skills: |
| N/A |
*The work environment characteristics described in the physical requirements section of the required skills & qualifications table are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential responsibilities.
| Your Experience at DC Water: |
At DC Water, our people make us an industry leader. Join a group of thinkers, innovators, and problem solvers focused on protecting life’s most precious resource in the nation’s capital.
We are proud to be an EEO/AA employer M/F/D/V.
We maintain a drug-free workplace and perform pre-employment substance abuse testing
The Americans with Disabilities Act prohibits discrimination against “qualified individuals with disabilities”.
If a reasonable accommodation is needed to participate in the job application or interview process, to
perform essential job functions, and/or to receive other benefits and privileges of employment, please
email complianceada@dcwater.com.