Lead Cybersecurity Engineer

The Cybersecurity organization advances the overall state of security at PPL through critical initiatives and coordination of large security and customer-focused projects. The organization builds and procures technologies, tools, and processes to better enable teams at PPL to develop secure platforms and protect data and systems with appropriate security controls. IT Cybersecurity also develops systems to monitor and respond to attacks against our systems, provides educational awareness to the corporation on security best practices, and ensures data sharing relationships with third parties securely protect PPL information.  

  
PPL is seeking a highly skilled Lead Engineer to join our Cybersecurity organization. In this role, you will work closely within our engineering team as well as cross functionally with other teams within Information Technology to ensure cybersecurity has the tools necessary to succeed. You will have direct responsibility for the usage, monitoring, and maintenance of the cyber technology used by the team, completing tool health assessments, and conducting reviews to identify opportunities for improvement. If you are passionate about setting up data security infrastructure, ensuring the technology is running optimally and efficiently, and working with teams to improve processes, this position is ideal for you. #LI-Hybrid 

• Develop and maintain policies, procedures and/or standards for the health of cybersecurity solutions 

• Perform Tool Health Assessments to identify both security and operational related issues 

• Manage, configure, and monitor tools and underlying infrastructure to ensure patches and/or updates are applied in accordance with policy and procedure 

• Tune configurations to maximize efficiency while accounting for stakeholder needs. 

• Research and evaluate alternative security solutions to determine feasibility and suitability 

• Create metrics to report on the overall health of security solutions 

• Establish relationships and communicate with vendors to obtain timely support and resolve issues 

• Conduct regular reviews of relevant applications and underlying infrastructure to identify areas for improvement. 
• Assist relevant parties on identified gaps in the technology stack based on analysis and execute strategies to mitigate/address the risk. 
• Identify and apply strategies to optimize resource utilization and minimize cost 
• Collaborate with cross-functional teams to ensure the solutions are providing value and operating in accordance with expectations 
• All other duties and projects as assigned. 

Education 

• Bachelor’s degree in Computer Science, Information Security, and/or a related field or an equivalent level of work related experience.  

Experience 

• A minimum of 7+ years of cybersecurity experience in the configuration and support of cybersecurity related applications and infrastructure 

• Proficiency in completing tool health assessments including performance, functionality, security, compatibility, user experience, and maintenance assessments. 

• Experience completing necessary documentation to comply with Configuration and Change Management processes 

• Experience in managing and configuring SIEMs, Antivirus, anti-malware, IDS/IPS, endpoint security solutions. 

• Experience in consolidating tools and/or standardizing configurations across different environments. 

• Experience in establishing relationships with vendors to resolve issues 

• Knowledge of various enterprise technology stacks used to build applications in the cloud 

• Experience in Security and/or Regulatory Frameworks such as NIST, CIS Benchmarks, SOX, NERC CIP, etc. 

• Strong analytical skills to assess risks and vulnerabilities in complex systems. 

• Strong leadership, communication, and interpersonal skills.
• Collaborative and effective in cross-functional team environments. 

Preferred Qualifications

• Certification in Cybersecurity (e.g., CISSP, CISM, etc) is preferred. 
• Experience working in Agile teams and have knowledge of Agile principles and practices. 
• Experience utilizing the Scaled Agile Framework (SAFe) 
• Understanding of data analytics, artificial intelligence, and machine learning concepts 
• Proficiency in scripting and automation for security testing.