Cybersecurity Senior Advisor (CA or DC)

Location: Hybrid at an SCE facility in Rosemead, California, or Washington, DC; employees must work and reside in California or Washington, DC unless otherwise noted. Up to 10% travel within the SCE service territory is required. Relocation may apply.

Salary: $182,800–$274,100 per year

Company

hirify.global is a clean-energy utility focused on reliable service, innovation, and reducing carbon emissions.

What you will do

• Lead hands-on cybersecurity risk assessments across enterprise IT and critical operational technology environments.
• Perform threat modeling, attack-path analysis, vulnerability discovery, control validation, configuration reviews, and root-cause analysis.
• Develop risk treatment plans, remediation backlogs, secure system profiles, compliance mappings, and measurable outcomes.
• Define secure-by-default baselines, hardening standards, access controls, key and secret handling, and automated security guardrails across on-premises and cloud environments.
• Drive complex security initiatives from design through rollout, coordinating infrastructure teams, internal stakeholders, vendors, and managed security providers.
• Improve security monitoring and incident prevention through security data analysis, threat-landscape review, system integration, patching, and remediation tracking.

Requirements

• At least 10 years of experience in information technology, information security, and/or cybersecurity.
• US citizenship is required.
• Ability to work and reside in California or Washington, DC under the hybrid work arrangement.
• Ability to pass a NERC/CIP Personnel Risk Assessment or Background Investigation and complete required training before unescorted access and assigned duties.

Nice to have

• Bachelor’s degree in Engineering, Information Technology, Cybersecurity, Environmental or Physical Sciences, Business, or a related discipline.
• Familiarity with NIST CSF, NIST 800-53, ISO 27001, and translating requirements into controls and evidence.
• Hands-on enterprise security assessment experience across on-premises and cloud environments, including control validation, configuration review, penetration testing, code review, and/or vulnerability triage.
• CISSP, GSEC, GICSP, or related security certification.
• Strong Windows/Linux, TCP/IP, DNS, and PKI/TLS fundamentals applied to troubleshooting and security analysis.
• Operational Technology experience, including industrial networks, Purdue model concepts, segmentation, and asset inventory constraints, or willingness to learn OT.

Culture & Benefits

• Hybrid work with a set number of days at an SCE facility and remote work on remaining days; the arrangement may change based on business needs.
• Work supports clean-energy innovation, service reliability, and protection of sensitive customer, proprietary, medical, financial, physical, and cybersecurity information.
• Employment follows applicable California Fair Chance requirements for qualified applicants with arrest or conviction records.
• Up to 10% field travel across the SCE service territory.

Hiring process

• External candidates must apply through the external careers site; SCE employees must use the internal Portal.
• Interview discussions will provide further details about the hybrid work mode.
• Successful candidates must complete the required pre-employment risk assessment or background investigation and specified training.