Information Security Analyst I or II

Entergy; New Orleans (LA); Hybrid; USD 65,000 - 95,000; Full time

Job summary

Entergy is seeking an Information Security Analyst I or II to join the CSOC team. The role focuses on investigating and responding to security incidents, understanding attack vectors, and maturing the security program.

The hybrid workplace with reporting to the CSOC Manager requires attention to detail, analytical mindset, and willingness to lead junior analysts and drive process improvements. Occasional travel up to 25%.

Qualifications

• Experience in security incident response and investigation.
• Familiarity with forensic analysis and digital evidence.
• Knowledge of threat landscapes and attack vectors.
• Proficiency with SIEM tools and incident handling.

Responsibilities

• Understand digital evidence and perform forensic analysis.
• Improve daily operations and incident response playbooks.
• Identify automation opportunities to enhance capabilities.
• Investigate security incidents including malware, phishing, and unauthorized access.
• Analyze attack vectors used by threat actors to compromise systems.
• Monitor threat landscape and identify emerging threats relevant to Entergy.
• Maintain SIEM detections and related tooling.
• Understand ICS/OT risks to protect critical infrastructure.
• Collaborate with cross-functional teams on security controls.
• Support cloud security monitoring and maturity initiatives.
• Travel up to 25%.

Skills

Incident response

Threat hunting

Forensic analysis

Security monitoring

AI in security

Tools

SIEM tools

Network forensics tools

MITRE ATT&CK knowledge

Cloud security monitoring

Job description

Job Title: Information Security Analyst I or II Work Place Flexibility: Hybrid Legal Entity: Entergy Services, LLC

Job Summary/Purpose:

The Consolidated Security Operations Center Analyst I-II will report to the Manager, CSOC and will manage day-to-day tasks as noted below, with additional projects as they arise. The Analyst to join our dynamic team with the Cybersecurity Organization at Entergy will have curiosity, critical thinking, analysis background and security background. This position will play a critical role in safeguarding our infrastructure and ensuring the integrity of our operations. The Tier 1 analyst will be responsible for investigating and responding to security incidents, understanding, and mitigating attack vectors, leveraging AI and Agentic AI tools and staying abreast of the evolving threat landscape. They will also be able to lead junior analysts and assist in maturing the security program. The ideal candidate is detail oriented, a problem solver with critical thinking skills, and focused on process improvement.

Job Duties/Responsibilities:

• Understanding of digital evidence and forensic analysis.
• Assist in continuously improving the existing daily operational and incident response procedures and playbooks.
• Identify automation opportunities to improve capabilities.
• Identify problematic trends and take proactive steps to mitigate negative impacts to customer base.
• Conduct investigations and understand security incidents, including but not limited to, malware infections, phishing attempts, and unauthorized access attempts.
• Analyze and understand various attack vectors used by threat actors to compromise systems and data.
• Monitor and assess the threat landscape to identify emerging threats and vulnerabilities relevant to our environment.
• Knowledge of using SIEM tools with possible areas of development and upkeep of detections
• Maintain understanding of the various threats and risks related to utility workforce, energy providers and/or NERC/CIP.
• Create opportunities using AI and Agentic AI within day-to-day operations.
• Monitor and participate in training and exercises to ensure CSOC team proficiency.
• Participate in post-incident reviews to identify lessons learned and best practices.
• Ability to work in network investigations to identify and mitigate potential security risks and intrusions.
• Have some knowledge in Industrial Control Systems (ICS) and Operational Technology (OT) to protect critical infrastructure and operational assets.
• Collaborate with cross-functional teams to understand security controls and measures to enhance our overall security posture.
• Understand cloud security monitoring and support improvements for maturity posture.
• Understand and recommend incident response process, procedures and playbooks to ensure effective and efficient response to security incidents.
• Support the threat hunting team to identify gaps of coverage and make recommendations on use cases for monitoring.
• Understand MITRE Framework, identify TTPs and identify patterns and threat actors focused to the industry.
• Provide timely and accurate reports on security incidents, trends, and metrics to stakeholders and management.
• Available to travel up to 25%