Job Details

Staff Network Security Operations Analyst

PGE's Network Security Operations team is seeking a Staff Network Security Operations Analyst to support and administer two critical security platforms: Splunk (SIEM) and Palo Alto Firewalls. This role is based out of our Tualatin / Sherwood location and reports within the Network Security Operations function.

While this role is not a SOC analyst role. We are looking for someone who builds, configures, owns, and manages the platforms that security operations teams rely on not someone who monitors dashboards. You will be the person who makes the magic happen behind the scenes, setting up indexes, configuring logging, tuning alerts, and ensuring the platform runs optimally for our internal cybersecurity customers.

Additionally, this role has a strong automation focus. You will identify repetitive administrative tasks and proactively develop automated solutions to improve efficiency across the team.

We value evidence of initiative over years of experience. If you are a go-getter who learns fast, thinks in code, and wants to build something meaningful we want to talk to you.

Key Responsibilities

• Splunk Administration: Own and manage PGE's Splunk SIEM platform, including index configuration, log ingestion, alert tuning, and system maintenance.
• Palo Alto Firewall Administration: Configure, manage, and maintain Palo Alto firewall infrastructure.
• Automation Development: Identify opportunities to automate repetitive administrative tasks using Python, PowerShell, or other scripting tools.
• Platform Support: Serve as a technical resource for cybersecurity teams who rely on the platforms you manage.
• Compliance Support: Contribute to initiatives supporting NERC CIP regulatory compliance requirements.
• Independent Troubleshooting: Proactively diagnose and resolve platform issues with minimal direction.
• Collaboration: Work closely with internal cybersecurity and IT teams as a key platform partner.

Required Qualifications

• Requires a bachelor's degree in an IT discipline or other related field or equivalent experience.
• Two or more years of progressive IT operations experience focusing on systems or networking support in an enterprise and/or data center environment.
• Splunk Administration experience: Hands-on platform administration (not end-user/SOC usage)
• Palo Alto Firewall Administration experience: Current, working knowledge
• Coding proficiency: Python and/or PowerShell required
• Automation mindset - Demonstrated ability to identify and automate manual or repetitive processes
• Self-starter: Ability to work independently, troubleshoot without step-by-step guidance, and take initiative
• Adaptability: Comfortable with change and evolving priorities in a fast-paced IT environment
• Requires a valid Driver's License and a history of safe driving practices.

Preferred Qualifications

• 2-4 years of relevant experience in network security operations or IT infrastructure
• Familiarity with NERC CIP compliance frameworks
• Experience in a role where you administered or built SIEM platforms (not just consumed alerts)
• Exposure to security operations environments where you owned platform configuration end-to-end
• Demonstrated examples of automation projects (scripts, tools, or workflows you built independently)
• Certifications within technical disciplines preferred.