<p>THE POSITION</p> <p>Are you a Cybersecurity professional looking to increase your "real" Cybersecurity experience? Are you up for a challenging career opportunity to help Commonwealth employees and the citizens of Pennsylvania? If so, the Security Analyst 1 position at the Public Utility Commission (PUC) is the perfect opportunity for you!</p> <p>DESCRIPTION OF WORK</p> <p>In this role, you will work with a lead security analyst and have responsibilities for implementing and maintaining the security systems that protect the PUC's organizational and informational assets, as well as participating in help desk responsibilities. You will also work on projects that help to identify and mitigate security risks, design and implement security controls, monitor and respond to security incidents, and provide technical assistance to users on security matters.</p> <p>This is a challenging and fast-paced role that will give you the opportunity to make a real difference in the security of the PUC's operations. You will be working alongside professionals and with the opportunity to learn and grow your skillset. If you are a motivated and results-oriented individual with a strong passion for Cybersecurity, then this is the role for you!</p> <p>Work Schedule and Additional Information:</p> <ul> <li> <p>Full-time employment</p> </li><li> <p>Work hours are 8:00 AM to 4:30 PM, Monday - Friday, with a 60-minute lunch. This position may be eligible for Alternate Work Schedules.</p> </li><li> <p>Free parking may be available.</p> </li><li> <p>Telework: Part-time work from home (telework) may be a potential feature of this position. The successful candidate is required to report to the headquarters worksite daily, unless the employee meets eligibility requirements and telework has been approved. Management may discontinue any telework arrangement at any time, for any reason. In order to telework, you must have a securely configured high-speed internet connection. If you are unable to telework, you will have the option to report to the headquarters office.</p> </li><li> <p>To be eligible to participate in telework, the employee's alternate (telework) worksite must meet the following requirements:</p> </li><li> <p>Within a reasonable travel distance of headquarters and</p> </li><li> <p>Within the Commonwealth of Pennsylvania.</p> </li><li> <p>Please direct all questions regarding reasonable distance and the type of available telework to the PUC Human Resource Office at ra-puchr@pa.gov or 717.787.8714.</p> </li><li> <p>Salary: In some cases, the starting salary may be non-negotiable.</p> </li><li> <p>You will receive further communication regarding this position via email. Check your email, including spam/junk folders, for these notices.</p> </li></ul> <p>REQUIRED EXPERIENCE, TRAINING & ELIGIBILITY</p> <p>QUALIFICATIONS</p> <p>Minimum Experience and Training Requirements:</p> <ul> <li>One year as a Network Specialist (Commonwealth job title or equivalent Federal Government job title, as determined by the Office of Administration); or </li><li>Two years of experience performing technical work in information technology security, network support, or network administration, and an associate's degree in any information technology field; or </li><li>A bachelor's degree in any information technology field. </li><li>Applicants will be considered to have met the educational requirements once they are within three months of graduating with a qualifying degree. </li></ul> <p>Other Requirements:</p> <ul> <li> <p>This particular position also requires:</p> </li><li> <p>One or more years of full-time professional experience with TrackIt.</p> </li><li> <p>One or more years of full-time professional experience with Splunk SecOps.</p> </li><li> <p>One or more years of full-time professional experience with Splunk ITSI.</p> </li><li> <p>You must meet the PA residency requirement. For more information on ways to meet PA residency requirements, follow the link and click on Residency Guidelines.</p> </li><li> <p>You must be able to perform essential job functions.</p> </li></ul> <p>How to Apply:</p> <ul> <li>Resumes, cover letters, and similar documents will not be reviewed, and the information contained therein will not be considered for the purposes of determining your eligibility for the position. Information to support your eligibility for the position must be provided on the application (i.e., relevant, detailed experience/education). </li><li>If you are claiming education in your answers to the supplemental application questions, you must attach a copy of your college transcripts for your claim to be accepted toward meeting the minimum requirements. Unofficial transcripts are acceptable. </li><li>Your application must be submitted by the posting closing date. Late applications and other required materials will not be accepted. </li><li>Failure to comply with the above application requirements may eliminate you from consideration for this position. </li><li>All application materials and interview responses must reflect the applicant's own experience, qualifications, and work. Applicants may use generative AI tools for preparation purposes only. Use of AI to misrepresent or falsify information, or to assist during interviews, is not permitted. Review the Guidance for Generative AI Tools & Job Seekers for additional information. </li></ul> <p>Veterans:</p> <ul> <li>Pennsylvania law (51 Pa. C.S. §7103) provides employment preference for qualified veterans for appointment to many state and local government jobs. To learn more about employment preferences for veterans, go to www.pa.gov/agencies/employment/how-to-apply.html and click on Veterans. </li></ul> <p>Telecommunications Relay Service (TRS):</p> <ul> <li>711 (hearing and speech disabilities or other individuals). </li></ul> <p>If you are contacted for an interview and need accommodations due to a disability, please discuss your request for accommodations with the interviewer in advance of your interview date.</p> <p>The Commonwealth is an equal employment opportunity employer and is committed to a diverse workforce. The Commonwealth values inclusion as we seek to recruit, develop, and retain the most qualified people to serve the citizens of Pennsylvania. The Commonwealth does not discriminate on the basis of race, color, religious creed, ancestry, union membership, age, gender, sexual orientation, gender identity or expression, national origin, AIDS or HIV status, disability, or any other categories protected by applicable federal or state law. All diverse candidates are encouraged to apply.</p> <p>EXAMINATION INFORMATION</p> <ul> <li> <p>Completing the application, including all supplemental questions, serves as your exam for this position. No additional exam is required at a test center (also referred to as a written exam).</p> </li><li> <p>Your score is based on the detailed information you provide on your application and in response to the supplemental questions.</p> </li><li> <p>Your score is valid for this specific posting only.</p> </li><li> <p>You must provide complete and accurate information or:</p> </li><li> <p>your score may be lower than deserved.</p> </li><li> <p>you may be disqualified.</p> </li><li> <p>You may only apply/test once for this posting.</p> </li><li> <p>Your results will be provided via email.</p> </li></ul> <p>Learn more about our Total Rewards by watching this short video!</p> <p>See the total value of your benefits package by exploring our benefits calculator.</p> <p>Health & Wellness</p> <p>We offer multiple health plans so our employees can choose what works best for themselves and their families. Our comprehensive benefits package includes health coverage, vision, dental, and wellness programs.*</p> <p>Compensation & Financial Planning</p> <p>We invest in our employees by providing competitive wages and encouraging financial wellness by offering multiple ways to save money and ensure peace of mind including multiple retirement and investment plan options.</p> <p>Work/Life Balance</p> <p>We know there's more to life than just work! Our generous paid leave benefits include paid vacation, paid sick leave, eight weeks of paid parental leave, military leave, and paid time off for most major U.S. holidays, as well as flexible work schedules and work-from-home opportunities.*</p> <p>Values and Culture</p> <p>We believe in the work we do and provide continual opportunities for our employees to grow and contribute to the greater good. As one of the largest employers in the state, we provide opportunities for internal mobility, professional development, and the opportunity to give back by participating in workplace charitable giving.</p> <p>Employee Perks</p> <p>Sometimes, it is the little "extras" that make a big difference. Our employees receive special employee-only discounts and rates on a variety of services and memberships.</p> <p>For more information on all of these Total Rewards benefits, please visit www.employment.pa.gov and click on the benefits box.</p> <ul> <li>Eligibility rules apply. </li></ul> <p>01</p> <p>Additional Requirement - Do you possess one or more years of full-time professional experience with TrackIt?</p> <ul> <li>Yes </li><li>No </li></ul> <p>02</p> <p>If you indicated YES to the question above, please describe the details of the experience you possess. Please be sure to address the items listed below in your response. The claimed experience must also be provided within the experience section of your application. If you indicated NO to the question above, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience </li><li>The specific duties you performed related to your experience with TrackIt </li><li>Your level of responsibility </li></ul> <p>03</p> <p>Additional Requirement - Do you possess one or more years of full-time professional experience with Splunk SecOps?</p> <ul> <li>Yes </li><li>No </li></ul> <p>04</p> <p>If you indicated YES to the question above, please describe the details of the experience you possess. Please be sure to address the items listed below in your response. The claimed experience must also be provided within the experience section of your application. If you indicated NO to the question above, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience </li><li>The specific duties you performed related to your experience with Splunk SecOps </li><li>Your level of responsibility </li></ul> <p>05</p> <p>Additional Requirement - Do you possess one or more years of full-time professional experience with Splunk ITSI?</p> <ul> <li>Yes </li><li>No </li></ul> <p>06</p> <p>If you indicated YES to the question above, please describe the details of the experience you possess. Please be sure to address the items listed below in your response. The claimed experience must also be provided within the experience section of your application. If you indicated NO to the question above, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience </li><li>The specific duties you performed related to your experience with Splunk ITSI </li><li>Your level of responsibility </li></ul> <p>07</p> <p>Have you been employed by the Commonwealth of Pennsylvania as a Network Specialist 1 for one year or more full-time?</p> <ul> <li>Yes </li><li>No </li></ul> <p>08</p> <p>If you are claiming experience in the above question, please list the employer(s) where you gained this experience in the text box below. The employer(s) and a description of the experience must also be included in the appropriate sections of your application if you would like the experience to be considered in the eligibility decision. If you claimed you do not have experience, type N/A in the text box below.</p> <p>09</p> <p>How much college coursework have you completed in the field of information technology? If you are claiming credits/degree, you must upload a copy of your college transcript(s) for this education to be considered in the eligibility decision. Unofficial transcripts are acceptable. You must attach your transcript(s) prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a transcript(s) to the application after it has been submitted.</p> <p>If your education was acquired outside of the United States, you must upload a copy of your foreign credential evaluation report. We can only accept foreign credential evaluations from organizations that are members of the National Association of Credential Services (NACES). A list of current NACES members can be found by visiting www.naces.org and clicking the Evaluation Services Link.</p> <p>You must attach your documentation prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a document to the application after it has been submitted.</p> <ul> <li>A bachelor's degree or higher </li><li>90 college credits and within 3 months of conferring degree </li><li>An associate's degree </li><li>None of the above </li></ul> <p>10</p> <p>How many years of full-time experience do you possess performing technical work in network support or network administration?</p> <ul> <li>2 or more years </li><li>1 but less than 2 years </li><li>Less than 1 year </li><li>None </li></ul> <p>11</p> <p>If you are claiming experience in the above question, please list the employer(s) where you gained this experience in the text box below. The employer(s) and a description of the experience must also be included in the appropriate sections of your application if you would like the experience to be considered in the eligibility decision. If you claimed you do not have experience, type N/A in the text box below.</p> <p>12</p> <p>Do you possess 1 or more years of full-time experience performing technical information technology security?</p> <ul> <li>Yes </li><li>No </li></ul> <p>13</p> <p>If you are claiming experience in the above question, please list the employer(s) where you gained this experience in the text box below. The employer(s) and a description of the experience must also be included in the appropriate sections of your application if you would like the experience to be considered in the eligibility decision. If you claimed you do not have experience, type N/A in the text box below.</p> <p>14</p> <p>Have you successfully completed, or are you within three months of completing a bachelor's degree in any information technology field? If you are claiming credits/degree, you must upload a copy of your college transcript(s) for this education to be considered in the eligibility decision. Unofficial transcripts are acceptable. You must attach your transcript(s) prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a transcript(s) to the application after it has been submitted.</p> <p>If you answer "Yes" to this question based on education acquired outside of the United States, you must upload a copy of your foreign credential evaluation report. We can only accept foreign credential evaluations from organizations that are members of the National Association of Credential Services (NACES). A list of current NACES members can be found by visiting www.naces.org and clicking the Evaluation Services Link.</p> <p>You must attach your documentation prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a document to the application after it has been submitted.</p> <ul> <li>Yes </li><li>No </li></ul> <p>15</p> <p>If you are within three months of completing a bachelor's degree in any information technology field, on what date do you expect to graduate? If this does not apply to you, please type N/A in the text box.</p> <p>16</p> <p>You must complete the supplemental questions below. These supplemental questions are the exam and will be scored. They are designed to give you the opportunity to relate your experience and training background to the major activities (Work Behaviors) performed in this position. Failure to provide complete and accurate information may delay the processing of your application or result in a lower-than-deserved score or disqualification. You must complete the application and answer the supplemental questions. Resumes, cover letters, and similar documents will not be reviewed for the purposes of determining your eligibility for the position or to determine your score.</p> <p>All information you provide on your application and supplemental questions is subject to verification. Any misrepresentation, falsification or omission of material facts is subject to penalty. If requested, you must provide documentation, including names, addresses, and telephone numbers of individuals who can verify the validity of the information you provide in the application and supplemental questions.</p> <p>Read each question carefully. Determine and select which "Level of Performance" most closely represents your highest level of experience/training. List the employer(s)/training source(s) from your Work or Education sections of the application where you gained this experience/training. The "Level of Performance" you choose must be clearly supported within the description of the experience and training information entered in your application or your score may be lowered. In order to receive credit for experience, you must have worked in a job for at least six months in which the experience claimed was a major function.</p> <p>If you have read and understand these instructions, please click on the "Yes" button and proceed to the exam questions.</p> <p>If you have general questions regarding the application and hiring process, please refer to our FAQ page.</p> <ul> <li>Yes </li></ul> <p>17</p> <p>WORK BEHAVIOR 1 - SECURITY CONTROL DEVELOPMENT, IMPLEMENTATION, AND MAINTENANCE</p> <p>Develops and implements security roles, profiles, security configurations and related options for user administration as needed in various system environments. Maintains the roles, profiles, and security configurations to ensure the safeguarding of data and physical computer assets and the confidentiality and integrity of information.</p> <p>Levels of Performance</p> <p>Select the Level of Performance that best describes your claim.</p> <ul> <li>A. I have experience developing and implementing security roles, profiles, or configurations. I was also responsible for maintaining the security roles, profiles, or configurations that I developed and implemented. </li><li>B. I have experience implementing and maintaining security roles, profiles, or configurations that someone else developed. </li><li>C. I have successfully completed college-level coursework related to security or secure networking. </li><li>D. I have NO experience or coursework related to this work behavior. </li></ul> <p>18</p> <p>In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience. </li><li>The actual duties you performed related to security control development, implementation, and maintenance. </li><li>The types of security control mechanisms you developed, implemented, and maintained. </li><li>Your level of responsibility. </li></ul> <p>19</p> <p>If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.</p> <ul> <li>College/University </li><li>Course Title </li><li>Credits/Clock Hours </li></ul> <p>20</p> <p>WORK BEHAVIOR 2 - SECURITY MONITORING AND OPTIMIZATION</p> <p>Monitors network or system performance to identify security deficiencies and threats by conducting risk assessments, root cause analyses, and audits. Manages identified security threats by ensuring that corrective action is taken to resolve any potential issues and risk.</p> <p>Levels of Performance</p> <p>Select the Level of Performance that best describes your claim.</p> <ul> <li>A. I have experience monitoring and evaluating network or system performance to identify security deficiencies and threats. I was responsible for conducting risk assessments, root cause analyses, audits, and taking corrective action. </li><li>B. I have experience monitoring and evaluating network or system performance to identify security deficiencies and threats. Someone else was responsible for conducting risk assessments, root cause analyses, audits, and taking corrective action. </li><li>C. I have successfully completed college-level coursework related to security monitoring, security optimization, or security management. </li><li>D. I have NO experience or coursework related to this work behavior. </li></ul> <p>21</p> <p>In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience. </li><li>The actual duties you performed related to security monitoring and optimization. </li><li>Your level of responsibility. </li></ul> <p>22</p> <p>If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.</p> <ul> <li>College/University </li><li>Course Title </li><li>Credits/Clock Hours </li></ul> <p>23</p> <p>WORK BEHAVIOR 3 - TECHNICAL ASSISTANCE</p> <p>Responds to escalated incidents by troubleshooting and diagnosing security issues and coordinates with end users and service providers to resolve issues. Provides advice and guidance to business areas on the importance and financial impact of security threats and works with other staff to ensure security is appropriately built into software. Researches current security solutions and informs management of emerging technologies.</p> <p>Levels of Performance</p> <p>Select the Level of Performance that best describes your claim.</p> <ul> <li>A. I have experience troubleshooting, diagnosing, and resolving escalated information technology issues. I was responsible for responding to complex technical questions and providing guidance as necessary. </li><li>B. I have experience troubleshooting and resolving information technology issues. I was responsible for responding to questions and resolving routine issues, but referred more complex technical questions and issues to someone else for resolution. </li><li>C. I have successfully completed college-level coursework related to information technology troubleshooting. </li><li>D. I have NO experience or coursework related to this work behavior. </li></ul> <p>24</p> <p>In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience. </li><li>The actual duties you performed related to the technical assistance you provided. </li><li>Your level of responsibility. </li></ul> <p>25</p> <p>If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.</p> <ul> <li>College/University </li><li>Course Title </li><li>Credits/Clock Hours </li></ul> <p>26</p> <p>WORK BEHAVIOR 4 - DEVELOPING STANDARDS, POLICIES, AND PROCEDURES</p> <p>Develops and implements information security and risk management standards, policies, and procedures to ensure the integrity, confidentiality, and availability of information owned, controlled, and processed. Determines the access control methods and standards for secure systems design and secure engineering to support the security of the network.</p> <p>Levels of Performance</p> <p>Select the Level of Performance that best describes your claim.</p> <ul> <li>A. I have experience developing information technology standards, policies, and procedures. I was also responsible for implementing changes to these standards, policies, and procedures as necessary. </li><li>B. I have experience implementing information technology standards, policies, and procedures. I provided feedback and recommendations for changes to these standards, policies, and procedures, which were developed by someone else. </li><li>C. I have successfully completed college-level coursework related to policy development or data analysis. </li><li>D. I have NO experience or coursework related to this work behavior. </li></ul> <p>27</p> <p>In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience. </li><li>The actual duties you performed related to developing standards, policies, and procedures. </li><li>The types of standards, policies, and procedures you developed. </li><li>Your level of responsibility. </li></ul> <p>28</p> <p>If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.</p> <ul> <li>College/University </li><li>Course Title </li><li>Credits/Clock Hours </li></ul> <p>29</p> <p>WORK BEHAVIOR 5 - WRITTEN COMMUNICATION</p> <p>Prepares technical or narrative documents such as progress reports and summaries of findings to inform leadership of security incidents and the status of response and resolution in accordance with established reporting procedures. Develops brochures, fliers, posters, and email communications to inform and educate users on security awareness.</p> <p>Levels of Performance</p> <p>Select the Level of Performance that best describes your claim.</p> <ul> <li>A. I have experience preparing technical or narrative reports. I was responsible for the final document that conveyed customized information to the intended recipients. </li><li>B. I have experience preparing technical or narrative documents; however, someone else was responsible for the final document that conveyed customized information to the intended recipients. </li><li>C. I have successfully completed college-level coursework related to business writing, technical writing, English composition, or journalism. </li><li>D. I have NO experience or coursework related to this work behavior. </li></ul> <p>30</p> <p>In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.</p> <ul> <li>The name(s) of the employer(s) where you gained this experience. </li><li>The actual duties you performed related to written communication. </li><li>The types of documents you prepared. </li><li>Your level of responsibility. </li></ul> <p>31</p> <p>If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.</p> <ul> <li>College/University </li><li>Course Title </li><li>Credits/Clock Hours </li></ul> <p>Required Question</p> <p>Employer Commonwealth of Pennsylvania</p> <p>Address 613 North Street</p> <p>Harrisburg, Pennsylvania, 17120</p> <p>Website http://www.employment.pa.gov</p>