Associate Cybersecurity Systems Engineering Analyst - Data Protection

The Cybersecurity Systems Engineering Analyst supports Duke Energy’s cyber security operations by assisting in the development and maintenance of tools used to generate security events and incidents across the enterprise. This role operates within a 24x7 CSOC environment and emphasizes detection and correlation for managed systems while following processes set by Cybersecurity leadership and CIRT.

Role Responsibilities

• Participate in content generation and ongoing operations for a Global Security Information and Event Management (SIEM) system, including ESM, Oracle, Connector appliances, SmartConnectors, Logger appliances, Windows and Linux servers, and network and security related devices.
• Perform functional testing to maintain operability of the cybersecurity tool suite, coordinating with the cyber defense team to manage and administer updates to rules and signatures for specialized cyber defense applications.
• Identify, develop, and deploy SIEM content and events within an evolving SIEM infrastructure, including work with Dashboards, Active Channels, Reports, Rules, Filters, Trends, Metrics, and Active Lists.
• Use knowledge of ongoing and emerging cyber threats related to network and endpoint vulnerabilities to define criteria for event and alert generation and correlation.
• Track cyber threat actors and campaigns using technical analysis and open source or third-party intelligence.
• Research and track new exploits and cyber threats to support continuous improvement of detection content.
• Support the establishment, enhancement, and continual improvement of integrated correlation rules, alerts, searches, reports, and responses for supported cybersecurity tool suites.
• Assist with maintenance (patching and upgrades), configuration, and operation of cybersecurity tools, including Endpoint / Antivirus, SIEM loggers and connectors, and network analysis and defense products.
• Enhance and tune product events and correlation rules to reduce false positives, and ensure deployment of the supported product set across the threat surface.
• Provide 24x7 Systems Engineer escalations on a rotating shift basis.

Required Qualifications

• High School/GED
• Minimum 2 years of related work experience

Preferred Qualifications

• Associates: 0 years work experience preferred
• Bachelors: 0 years work experience preferred

Technologies

• Global Security Information and Event Management (SIEM)
• ESM
• Oracle
• Connector appliances
• SmartConnectors
• Logger appliances
• Windows and Linux
• Endpoint / Antivirus
• SIEM loggers and connectors
• Windows and Linux command line scripting
• NIST Cybersecurity Framework

Location and Work Model

Charlotte, NC (hybrid)

• Work will be performed from both remote and onsite locations after onboarding.
• Hybrid employees must live within a reasonable commute to the designated Duke Energy facility, not greater than 50 miles one way.
• Employees are expected to report to the assigned Duke Energy facility as required and directed by their manager, on average 3 full workdays per regular workweek.
• Office Environment

Travel, Relocation, and Sponsorship

• Travel requirements: Not required
• Relocation assistance provided: No
• Represented/union position: No
• Visa sponsored position: No. This role requires the ability to work lawfully in the U.S. without employment-based immigration sponsorship, now or in the future.

Application Deadline

Please submit your application by 11:59 PM on Saturday, September 19, 2026.