Cyber Defense Specialist

About the role

LUMA Energy is seeking a Cyber Defense Specialist to protect its critical IT and OT environments. The role focuses on triaging alerts, investigating threats, and enhancing defensive capabilities to maintain confidentiality, integrity, and availability of the power grid in Puerto Rico.

Key responsibilities

• Triaging security alerts, determining root cause, and prioritizing incident handling in line with SOC standards.
• Investigating suspicious activity across SIEM, email, and network telemetry to validate threats and produce evidence‑based findings.
• Coordinating incident response with cross‑functional cybersecurity teams and documenting lessons learned.
• Conducting proactive threat hunting and intelligence analysis to identify emerging risks.
• Supporting vulnerability assessments, defense architecture reviews, and maintaining playbooks, detection rules, and SOPs.
• Participating in on‑call rotation to ensure 24/7 SOC readiness and assisting with storm restoration tasks.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or related field (or equivalent experience).
• Minimum 5 years of cybersecurity experience, preferably in a SOC or incident analysis role.
• Hands‑on experience with SIEM platforms (e.g., Sumo Logic), EDR solutions (e.g., CrowdStrike), and security monitoring tools.
• Professional certification such as CompTIA Security+, CySA+, CISSP, CEH, GCIA, GCIH or equivalent.

Required skills

• Network and traffic analysis: TCP/IP, firewalls, VPN, IDS/IPS.
• Operating systems: Windows and Linux.
• Scripting: Python, PowerShell, Bash.
• Frameworks: NIST CSF, MITRE ATT&CK, ISO 27001.
• Threat hunting, incident response, vulnerability assessment.