Cybersecurity Intelligence Specialist

Join the Clean Energy Revolution

Become a Cybersecurity Intelligence Specialist and help strengthen our proactive defense capabilities. In this role, you'll support the Cyber Threat Hunt and Intelligence team by researching, analyzing, and disseminating threat intelligence that enables informed decision-making and targeted cybersecurity response. You'll work across a wide range of cyber intelligence toolsets to monitor, assess, and escalate critical threat insights aligned to Priority Intelligence Requirements (PIRs). Your contributions will directly enhance threat detection, situational awareness, and strategic planning efforts across the Cybersecurity Operations Center (CSOC). You'll collaborate closely with incident response, threat hunt, and detection teams, integrating intelligence into daily operations and helping evolve our threat-informed defense strategy.

• Monitor, research, and evaluate open-source, commercial, and government threat intelligence feeds to identify emerging cyber threats, trends, and threat actor activity.
• Develop and enrich threat indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) within the threat intelligence platform, maintaining up-to-date contextual relationships.
• Action alerts within cyber intelligence toolsets and evaluate their relevance, severity, and potential impact to organizational assets.
• Collaborate with the CSOC team to provide relevant context for alerts, contribute to threat hunts, and support intelligence-driven investigations.
• Produce and deliver timely and actionable intelligence reporting tailored to operational, tactical, and strategic audiences.
• Support the continuous improvement of intelligence processes, documentation, and integration into CSOC workflows.
• Contribute to daily stand-ups and cross-functional collaboration efforts to ensure intelligence activities remain aligned with CSOC priorities and evolving threat landscapes.

• Investigates and responds to security alerts including on-call rotation
• Supports the development, design, logistics, and facilitation of internal and external cybersecurity exercises
• Steers the analysis of network traffic and system data to identify anomalous activity and potential threats to resources
• Delivers cyber incident triage including identifying the specific vulnerability and making recommendations which enable expeditious remediation
• Conducts vulnerability research activities, gathers information on new and emerging threats and vulnerabilities
• Reports on and suggests solutions for damage to the data and infrastructure as a result of cyber incidents
• Supports the strategic development of Cyber Security Programs ensuring alignment with the cyber security strategy and develops and improves cyber security procedures owned by the team
• Manages cyber incident trend analysis and reporting
• Creates and maintains high quality documentation related to IT processes including flow charts and data flow diagrams
• Maintains the cybersecurity post-incident after action tracking process
• A material job duty of all positions within the Company is ensuring the protection of all its physical, financial and cybersecurity assets, and properly accessing and managing private customer data, proprietary information, confidential medical records, and other types of highly sensitive information and data with the highest standards of conduct and integrity.

• Three or more years of experience in information technology, information security and/or cybersecurity.
• US Citizenship Required.

• Bachelor's degree in specialized field or an equivalent combination of education, training, and experience .
• Certifications: CISSP, GISF, GSEC, GCTI.
• Strong written and verbal communications skills.
• Experience leading and collaborating with cross-functional teams.
• Ability to think critically and maintain thorough and comprehensive documentation.
• Experience working in a Security Operation Center, Incident Response or Intelligence team.
• Comfortable working in multiple, diverse IT environments and eco-systems.

• This position's work mode is hybrid. The employee will report to an SCE facility for a set number of days with the option to work remotely on the remaining days.\u202f Unless otherwise noted, employees are required to work and reside in the state of California.\u202f Further details of this work mode will be discussed at the interview stage. The work mode can be changed based on business needs.
• Visit our Candidate Resource page to get meaningful information related to benefits, perks, resources, testing information, hiring process, and more!

• Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
• This position has been identified as a NERC/CIP impacted position - Prior to being hired, the successful candidate must pass a Personnel Risk Assessment (PRA) or Background Investigation. Once hired, the candidate must complete specified training prior to gaining un-escorted access to assigned work location and performing necessary job duties.
• US Citizenship required as part of Critical Infrastructure security protocols.

• Relocation may apply to this position.