What are the responsibilities and job description for the Cybersecurity Analyst position at Deriva Energy?
Overview
Job Description:
Deriva Energy is a leading Independent Power Producer in the US renewables market, with over 6.5GW of operating or under construction wind, solar and storage projects across the country. Formerly the division of Duke Energy, Deriva is now backed by Brookfield Renewable and is poised for dynamic growth across its wind, solar, and storage portfolios. Join a dynamic team committed to excellence and innovation who envision a future of energy independence using resilient, carbon-free generation. We offer competitive compensation, comprehensive benefits, and the opportunity to make a significant impact on the rapidly evolving renewable energy industry. Deriva empowers customers with innovative clean energy solutions that strengthen communities and serve future generations.
Position Summary
We are seeking a Cybersecurity Analyst to support and enhance our organization’s security posture across IT and operational environments. This role is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats, as well as contributing to compliance initiatives and continuous improvement of security controls. The ideal candidate is analytical, detail-oriented, and comfortable operating in a regulated environment.
This is an in-person position located at our Deriva Energy Headquarters in Charlotte, NC.
Main Responsibilities
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.
Deriva welcomes veterans of the United States Armed Forces to apply for this position. Deriva includes veterans of all branches and a diverse set of occupational specialties. We value the independent thinking, problem solving, leadership, and teamwork that our veterans have developed through their service. We welcome applications from any service and any military occupational specialty.
Deriva Energy is an Equal Opportunity and Affirmative Action Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, protected veteran or military status, and other categories protected by federal, state or local law.
Job Description:
Deriva Energy is a leading Independent Power Producer in the US renewables market, with over 6.5GW of operating or under construction wind, solar and storage projects across the country. Formerly the division of Duke Energy, Deriva is now backed by Brookfield Renewable and is poised for dynamic growth across its wind, solar, and storage portfolios. Join a dynamic team committed to excellence and innovation who envision a future of energy independence using resilient, carbon-free generation. We offer competitive compensation, comprehensive benefits, and the opportunity to make a significant impact on the rapidly evolving renewable energy industry. Deriva empowers customers with innovative clean energy solutions that strengthen communities and serve future generations.
Position Summary
We are seeking a Cybersecurity Analyst to support and enhance our organization’s security posture across IT and operational environments. This role is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats, as well as contributing to compliance initiatives and continuous improvement of security controls. The ideal candidate is analytical, detail-oriented, and comfortable operating in a regulated environment.
This is an in-person position located at our Deriva Energy Headquarters in Charlotte, NC.
Main Responsibilities
- Monitor security tools (SIEM, EDR, email security, etc.) for suspicious activity and investigate alerts
- Perform incident triage, analysis, and response, including containment and remediation actions
- Support vulnerability management processes, including scanning, prioritization, and remediation tracking
- Assist in the development, implementation, and maintenance of cybersecurity policies, standards, and procedures
- Participate in regulatory compliance efforts (NERC, NIST, evidence collection, control validation)
- Analyze phishing attempts and support security awareness initiatives
- Conduct log analysis across various systems to identify anomalies and potential threats
- Collaborate with IT and business units to address security risks and implement safeguards
- Maintain documentation related to incidents, processes, and security controls
- Contribute to continuous improvement of detection and response capabilities
- Bachelor’s degree in Cybersecurity, Information Technology, or related field
- In addition to a bachelor’s degree, two (2) years or more of experience in a cybersecurity, IT security role, or related role
- In lieu of a bachelor’s degree, HS/GED AND six (6) years or more of relevant experience in a cybersecurity, IT security role, or related role
- Experience with security tools such as SIEM, endpoint protection, vulnerability scanners, and email security platforms
- Strong understanding of networking concepts, operating systems, and common attack vectors
- Familiarity with incident response processes and frameworks
- Ability to analyze and interpret logs and security data
- Experience in a regulated industry (e.g., energy, utilities, finance)
- Familiarity with cybersecurity frameworks (e.g., NIST CSF, CIS Controls)
- Knowledge of compliance standards such as NERC CIP
- Relevant certifications (e.g., Security , CySA , GCIH, CISSP – Associate level acceptable)
- Experience with Microsoft 365 security and Defender tools
- Strong analytical and problem-solving skills
- Attention to detail and ability to prioritize effectively
- Clear written and verbal communication skills
- Ability to work independently and as part of a team
- High level of integrity and accountability
- Strong skills with MS Defender, Sentinel, KnowBe4, Tenable, BitDefender
- This position is located in Charlotte, NC
- Employees should live within a reasonable daily commute to the designated office location
- This is an in-office position with hybrid flexibility (4 days in office required)
- Opportunity to directly impact the organization’s cybersecurity maturity
- Exposure to both IT and operational technology (OT) environments
- Collaborative team environment with leadership support
- Ongoing professional development and training opportunities
- Ability to hire at a higher level if the right qualified candidate is identified
- Health Insurance
- Dental Insurance
- Vision Insurance
- 401(k) with matching
- Employee assistance program
- Flexible spending account
- Life insurance
- Paid time off
- Parental leave
- Attractive Bonus Potential
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.
Deriva welcomes veterans of the United States Armed Forces to apply for this position. Deriva includes veterans of all branches and a diverse set of occupational specialties. We value the independent thinking, problem solving, leadership, and teamwork that our veterans have developed through their service. We welcome applications from any service and any military occupational specialty.
Deriva Energy is an Equal Opportunity and Affirmative Action Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to their race, color, creed, religion, national origin, citizenship status, ancestry, sex, age, physical or mental disability, marital status, family responsibilities, pregnancy, genetic information, sexual orientation, gender expression, gender identity, transgender, sex stereotyping, protected veteran or military status, and other categories protected by federal, state or local law.