Information Security Analyst I - III

About the role

The Consolidated Security Operations Center Analyst will report to the Supervisor of CSOC and will manage day-to-day tasks as noted below, with additional projects as they arise. The Analyst to join our dynamic team with the Cybersecurity Organization at Entergy will have curiosity, critical thinking, analysis background and security background. This position will play a critical role in safeguarding our infrastructure and ensuring the integrity of our operations.

Responsibilities

• Understanding of digital evidence and forensic analysis.
• Aid in continuously improving the existing daily operational and incident response procedures and playbooks.
• Identify automation opportunities to improve capabilities.
• Identify problematic trends and take proactive steps to mitigate negative impacts to customer base.
• Conduct investigations and understand security incidents, including but not limited to, malware infections, phishing attempts, and unauthorized access attempts.
• Analyze and understand various attack vectors used by threat actors to compromise systems and data.
• Maintain understanding of the various threats and risks related to utility workforce, energy providers and/or NERC/CIP.
• Monitor and participate in training and exercises to ensure CSOC team proficiency.
• Participate in post-incident reviews to identify lessons learned and best practices.
• Ability to work in network investigations to identify and mitigate potential security risks and intrusions.
• Knowledge in Cloud (SaaS, IaaS, PaaS), Industrial Control Systems (ICS) and Operational Technology (OT) to protect critical infrastructure and operational assets.
• Collaborate with cross-functional teams to understand security controls and measures to enhance our overall security posture.
• Understand cloud security monitoring and support improvements for maturity posture.
• Understand and recommend incident response process, procedures and playbooks to ensure effective and efficient response to security incidents.
• Support the threat hunting team to identify gaps of coverage and make recommendations on use cases for monitoring.
• Understand MITRE Framework, identify TTPs and identify patterns and threat actors focused to the industry.
• Provide timely and accurate reports on security incidents, trends, and metrics to stakeholders and management.

Requirements

• Minimum Education Required: Typically requires an associate’s degree or university degree in related field (i.e. Cybersecurity, Information security, criminal justice, computer science, etc.) or the equivalent work experience.
• Minimum Experience Required: Analyst I - 0 to 1+ years of security experience, Analyst II - 2+ years of cybersecurity experience, Analyst III - 5+ years of cyber security experience.

Qualifications

• Hands-on experience working with Security Incident and Event Management, incident response in a SOC environment with a structured after-hours process.
• Hands-on experience working with Security Information Event Management (SIEM), event and incident investigations and incident response in a 24/7 SOC environment.
• Knowledge of various attack vectors, threat intelligence sources, and the cybersecurity threat landscape.
• Experience to include some of the following: access control, CCTV, network investigations, intrusion detection systems (IDS), and/or security information and event management (SIEM) tools.
• Understanding of Cloud (SaaS, IaaS, PaaS), Industrial Control Systems (ICS) and Operational Technology (OT) security principles and best practices.
• Understanding of cloud environment for security principles and best practices.
• Provision of guidance and mentorship to others in cyber threat analysis and operations.
• Proactive identification of possible threats, security gaps and vulnerabilities.

Skills

• Good planning, organizational and time management skills; detail and process-oriented; able to juggle multiple priorities.
• Good problem-solving/decision making ability.
• Good written and verbal communication skills.
• Good interpersonal skills, including teamwork.
• Highly collaborative, able to work cross-functionally; possessing the ability to forge relationships and partner effectively.
• Resourceful and self-motivated, able to work independently when required.
• Good analytical, critical thinking and decision-making skills.
• Cloud understanding of secure monitoring and incident response.
• Understanding of systems (including industrial control systems).
• Good report writing and communication and ability to effectively communicate across the organization.
• Demonstrated commitment to customer service with excellent oral and written communication skills.
• Self-motivated, with ability to work independently and in a team setting while following up on multiple tasks.

Benefits

Not specified.

Pay

Not specified.

Schedule

Not specified.

Benefits

Not specified.