Security Engineer
Important Application Submission Information Build an exciting, rewarding career with us – help us make a difference for millions of people every day.
Important Application Submission Information
More than a career - a chance to make a difference in people's lives.
Build an exciting, rewarding career with us – help us make a difference for millions of people every day. Consider joining the Duke Energy team, where you'll find a friendly work environment, opportunities for growth and development, recognition for your work, and competitive pay and benefits.
Position Summary
The Cybersecurity Network Defense Analyst (CNDA) is responsible for protecting Operational Technology (OT) environments, including substation networks, against unauthorized cyber activity through the governance, validation, and continuous monitoring of network defense controls. This role ensures that security technologies, access controls, and network segmentation strategies are implemented and maintained in alignment with NERC CIP standards (e.g., CIP-005, CIP-007, CIP-010), TSA Security Directives, SOX controls, and PCI-DSS requirements.
The CNDA operates within a compliance-driven, risk-based framework, with primary accountability for independent validation and oversight of firewall configurations, rule changes, and network security controls. This includes reviewing and approving firewall rule sets, verifying adherence to least privilege and segmentation requirements, and ensuring all changes are properly authorized, documented, and auditable. The role emphasizes control effectiveness validation rather than direct implementation, ensuring separation of duties and alignment with audit expectations.
Posted July 24, 2026