■ NERC 693 - Compliance■ NERC CIP - ComplianceProvides expert level knowledge of electric regulatory reliability and security compliance activities mandated by the regulatory agencies including, ReliabilityFirst (RF), North American Electrical Reliability Corp. (NERC), and Federal Energy Regulatory Commission (FERC)• Ensures policies, procedures, and processes comply with audit and regulatory requirements, including consistency across the organization with the reliability and security requirements• Gathers support from management for changes in policies and procedures impacting business units (BUs) and the NERC Compliance Organization (NCO)• Supports the internal and external audit preparation and delivery• Conducts compliance assessments, reviews, and audits to ensure compliance with applicable regulations and requirements• Conducts research and interprets standards and policies to identify and support best practices• Serves as expert liaison for company with regulatory agencies for compliance requirements

■ NERC 693 - Compliance■ NERC CIP - Compliance

■NERC CIP - Compliance■ Incident Response - Lead incident response, participate in analysis, documentation and reporting, work with Incident Handlers to provide recommendations for remediation of compromised systems and any relevant counter-measures ■ SIEM Administration (Qradar, Splunk) - hardware, OS, software, SIEM application maintenance and configuration including rules development for use cases and log parsing and analysis■ Network security including firewall, IDS and IPS■ Review and analyze data and network traffic from numerous security tools such as full packet captures and security device logs in order to detect traffic anomalies, identify infected systems and determine lateral movement of infections across the network■ Conduct basic static and dynamic malware analysis ■ Evaluate security solutions and provide recommendationsRequired Skills:■ Extensive experience with both Operations Technology and Information Technology ■ Operating Systems (Windows, Linux, BSD, RTOS)■ TCP/IP networking, routing protocols and full packet capture analysis ■ Knowledge of enterprise virtualization technology (hardware and software)■ Knowledge of enterprise systems and infrastructure■ Scripting (Powershell, Python, BASH)■ Compliance (NERC, NRC, PCI)

■ NERC CIP - Compliance■ Operational Technology (OT)■ Plans, schedules, and manages operational day-to-day engineering support work activities for security/authentication technologies/infrastructures ■ Manages problem resolution and issue escalation■ Leads projects to ensure on-time and in-budget implementation to support the achievement of business unit strategic plans ■ Makes recommendations in area of security administration/authentication and the introduction of technology to the NERC/ITS organizations■ Participates in evaluating enabling technologies; designs and manages security architectures; leads research of advanced technologies ■ Consults on security architecture design and direction.■ (CI) Continuous Improvement■ Keeps abreast of technology trends and the stated direction of the enterprise in order to select technology platforms that are appropriate and cost beneficial■ Established professional presence in the industry and maintains business relationships with key technical dependent industries and organizations to support the application of technology to specific business areas.■ Works as a proactive team player in dynamic environments and acts as project lead on multiple projects. Supports multiple internal and external clients. ■ Leads and facilitates meetings and group discussions; develops and conducts formal and informal presentations and technical training classes.

■ NERC CIP - Compliance■ NERC Audits■ Industrial Control System security■ Industrial Control System implementation support, maintenance and troubleshooting■ Experienced with implementation and maintenance of virtualization technology■ Experienced with implementation and maintenance of historian technology■ Stay current with industry trends, hardware, software, and methods■ Maintain current proficiency in technologies associated with ICS systems and security■ (CI)Continuous Improvement■ Assist with on-the-job training and mentoring for new staff members and co-op students

■ NERC CIP■ Data historian system administration■ Software/hardware repair, servicing & upgrades for process control computers, servers, networks and backup systems■ Provided effective and helpful technical support to fellow DTE employees■ Gave effective and understandable presentations to superiors and fellow employees■ Monitored existing critical plant computers, control systems and processes to maintain optimal functionality■ Designed/Programmed GUI interfaces & Re-programmed RTU’s for oil pipeline monitoring and alarm system■ Various data mining task, information gathering and analysis task in order to provide accurate data for a new control system implementation