Information Security Analyst Senior - Senior Lead

About the role

The Information Security Analyst – Consolidated Security Operations Center (CSOC) is responsible for effective execution of 24/7 monitoring operations and incident management of cyber and physical security. Through maintenance and supervision of security programs, the Consultant Sr executes on guidance and ensures all processes and procedures are followed within CSOC teams. The Sr Lead will leverage artificial intelligence (AI) and Agentic AI tools in decision making of escalated security events.

Workplace: Hybrid. Primary locations: The Woodlands, TX; New Orleans, LA; Little Rock, AR; Jackson, MS. Candidates outside these areas must relocate; relocation assistance and visa sponsorship are not available. Travel: Up to 25%. FLSA: Professional (exempt). Req ID: 125333.

Responsibilities

• Direct eyes-on-glass monitoring and tier‑1/tier‑2 support for events and incidents related to security operations in corporate and OT environments
• Orchestrate AI agents to automatically execute playbook workflows
• Monitor security events from cyber and physical security monitoring tools, end‑user notifications, etc. to determine security risk and respond accordingly
• Ensure CSOC performance complies with NERC CIP and NRC Nuclear Cyber (10 CFR 73.54) requirements
• Implement strategy and technology roadmap for the CSOC function
• Deliver process excellence and maturity to push the envelope on delivering a world‑class CSOC function for all information and operational technology assets, including power generation units, nuclear plants, electric substations, SCADA, distribution automation, and advanced metering infrastructure (AMI)
• Assist in forensic investigations as necessary
• Participate in response, triage, and escalation of security events affecting the company’s information assets and activities to Tier 2/3, OT IT Security operations, or service provider as necessary
• Deliver on the response process to minimize the impact of risks
• Responsible for after‑hours and weekend activities necessary to support business needs
• Assist with maintenance of KPIs within the CSOC team to ensure high productivity, supportability, and operational readiness
• Assist with project‑related work as required
• Assist with digitization efforts to automate routine playbooks and identify opportunities for automation
• Participate in training and exercises to ensure CSOC team proficiency
• Participate in post‑incident reviews to identify lessons learned and best practices

Requirements

Information Security Analyst Senior

• 5+ years of cyber and/or physical security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.)
• 2+ years of hands‑on experience with Security Information Management, event management, and incident response in a 24/7 SOC environment
• Experience using AI and agentic AI tools
• Experience working with a team required to operate in 24/7 shifts
• Experience working with outsourced teams
• Exposure to operational best practices like ITIL
• Ability to work effectively with team members and customers
• Strong organizational and time‑management skills

Information Security Analyst Senior Lead

• 6+ years of cyber and/or physical security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.)
• 3+ years of hands‑on experience with Security Information Management, event management, and incident response in a 24/7 SOC environment
• Experience using AI and agentic AI tools
• Experience working with a team required to operate in 24/7 shifts
• Experience working with outsourced teams
• Exposure to operational best practices like ITIL
• Ability to work effectively with team members and customers
• Strong organizational and time‑management skills

Qualifications

• Hands‑on technical engineering and process management skills; ability to advocate positive transformation within the broader IT organization
• Commitment to customer service with strong oral and written communication skills
• Understanding of AI, AI models, and Agentic AI capabilities for automation of triaging alerts and incident response
• Knowledgeable about artificial intelligence and agentic AI
• Knowledge of multiple UNIX OS platforms and Windows‑based operating systems
• Knowledgeable about security operations, cyber security monitoring, intrusion detection, and secured networks
• Strong knowledge of security ramifications of energy‑related regulations (SOX, HIPAA, NERC CIP, FERC, NRC Nuclear Cyber 10 CFR 73.54)
• Knowledge of security, risk, and control frameworks and standards such as ISO 27001/27002, SANS‑CAG, NIST, FISMA, COBIT, COSO, and ITIL
• Understanding of current IT security trends, best practices in technology, monitoring best practices, and tools
• Knowledge of scripting languages such as Perl or Python
• Strong writing and communication skills
• Available to travel
• Self‑motivated, with ability to manage and follow up on multiple tasks simultaneously
• Capable of meeting deadlines

Education

Associate’s degree in computer science, cyber security, or related discipline (or equivalent work experience). Bachelor’s degree preferred.

Certifications

• ISACA certification such as CISSP
• Vendor credentials offered by companies such as AWS, Microsoft, Google, EDR, SIEM tools

Working conditions

As a provider of essential services, Entergy expects employees to be available to work additional hours, work in alternate locations, and/or perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties. Authorization to work in the United States is a precondition to employment; Entergy will not sponsor candidates for work visas for this position.