Information Security Engineer I or II

Entergy Corporation; Little Rock (AR); Hybrid; USD 80,000 - 110,000; Full time

Job summary

Entergy is seeking an Information Security Engineer I/II to maintain and evolve its security engineering function across enterprise systems. The role focuses on deployment and operation of SIEM and endpoint security tools to reduce incident response times.

The position collaborates with CSOC, TVM, and other teams in a 24x7 environment and requires knowledge of regulatory standards (NERC CIP, NRC Nuclear Cyber). Travel may be needed.

Qualifications

• Requires knowledge of security monitoring and incident response.
• Familiarity with NERC CIP and NRC Nuclear Cyber (10 CFR 73.54) regulations.
• Experience across multiple security disciplines (monitoring, logging, event correlation).

Responsibilities

• Maintain and evolve the security engineering function.
• Deploy and operate SIEM and endpoint security tools.
• Collaborate with CSOC and other teams in a 24x7 environment.

Skills

SIEM

Endpoint Security

Python/Perl

Cloud Monitoring

Security Engineering

Education

Associate’s degree in CS/cyber security

Tools

SIEM platforms

Job description

Select how often (in days) to receive an alert:

Company: Entergy

Posting End Date: 02/16/2022

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

***This position will be filled as an Information Security Engineer I or II depending on the candidates experience and qualifications***

***This position may be filled in Little Rock AR, The Woodlands TX, or New Orleans LA***

Brief Position Description:

The Information Security Engineer is responsible for maintaining and evolving a successful security engineering function within Information Security.The security engineering team owns successful deployment and operation of security monitoring tools and processes designed for real-time analysis of events and alerts generated across the enterprise to protect the company’s assets, solutions, and services by reducing time to triage security incidents and risks. This role coordinates security capabilities and industry best practices with all areas of the enterprise.

Key responsibilities include:

• Implement necessary monitoring policies, reference architectures, and procedures in compliance with statutory and regulatory requirements covering internal and external parties, regulated and non-regulated physical, operational, and business systems throughout the enterprise
• Assist in satisfying specific requirements to ensure security of the environment in compliance with North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)
• Execute on strategy & technology roadmap for the implementation and maintenance of Security Information Event Management (SIEM) platform and Endpoint Security toolsets.
• Drive process excellence and maturity to push the envelope on delivering a world-class Cyber Security function to protect Entergy against cyber threats
• Support life-cycle management of the SIEM platform and Endpoint Security tools, including assistance with coordination and planning of upgrades, new deployments, and maintenance of current operational systems
• Execute on world-class cyber defense capability for all information technology and operational technology assets including power generation units, nuclear plants, electric substations, SCADA, distribution automation, advanced metering infrastructure (AMI), email, and networks.
• Work closely with Consolidated Security Operations Center (CSOC), Threat & Vulnerability Management (TVM), other internal/external teams and management in a 24x7 operational environment
• Execute the processes to monitor, analyze, and correlate logs and alerts across multiple platforms to identify advanced threats or incidents affecting the enterprise aiding in the development of use case content.This includes any relevant source of security logging or other data.
• Assist in maintaining documentation and evidence to be used for after action reporting and/or legal evidence
• Monitor and respond to regulatory developments and industry best practices, with manager direction
• Accountable for execution of security engineering support of all device classes (server, desktop, mobile, etc.), hosting models (on-premises, external, cloud) and applications to which security platforms apply
• Work closely with all teams in Information Security to implement use cases for monitoring
• Deliver on KPIs to measure effectiveness of security engineering and report trends
• Support security orchestration efforts and help to identify opportunities for automation
• Collaborate and work across other IT and Information Security areas to design and onboard new systems to follow monitoring standards and best practices
• Oversee and review work of junior resources as needed

Minimum Experiencerequired:

• Info Sec Engineer I : 0-2 years of cyber security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.) or relevant education and training.
• Info Sec Engineer II : 2 plus years of cyber security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.) or relevant education and training.

Minimum knowledge, skills, and abilities required of the position:

• Demonstrated technical engineering and process management skills and the ability to advocate and support positive transformation within the broader information technology organization
  • Knowledge of cloud monitoring strategies and techniques
  • Knowledge of Data Loss Prevention practices and procedures
• Broad knowledge of multiple UNIX OS platforms and Windows-based operating systems
• Well-versed in security operations, cyber security monitoring, intrusion detection, and secured networks
• Strong knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
• Knowledge of security, risk, and control frameworks and standards such as ISO 27010 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO, ITIL, and ATT&CK
• Knowledge of current IT Security trends and best practices in technology, as well as monitoring best practices and tools
• Working knowledge with scripting languages such as Perl or Python
• Strong report writing and communication and ability to effectively communicate across the IT organization
• The ability to work well independently or with a team
• Available to travel
• Capable of meeting deadlines

Associate’s degree in computer science, cyber security or a related discipline or equivalent work experience.

Any certificates, licenses, etc., required for the position:

Certifications such as CISSP, CISM, CISA or GIAC certifications are a plus

#LI-DG1 #LI-HYBRID

#LI-DG1 #LI-HYBRID #LI-DG1 #LI-HYBRID

Primary Location: Arkansas- Little RockArkansas : Little Rock || Louisiana : New Orleans || Texas : The Woodlands
Job Function: Corporate
FLSA Status: [[customString3]]
Relocation Option: No Relocation Offered
Union description/code: [[customString5]]
Number of Openings: 1
Req ID: 125296
Travel Percentage: Up to 25%

EEO Statement:The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility:Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf.

Additional Responsibilities:As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Entergy Pay Transparency Policy Statement:The Entergy System of Companies (the Company) will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company’s legal duty to furnish information. 41 CFR 60-1.35(c). Equal Opportunity and Pay Transparency .

The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment. Please [e-mail] to schedule a time to review the affirmative action plan during regular office hours.

One way that Entergy has found to identify and assess the abilities and skills needed for certain jobs is through pre-employment testing. If this position does require an EEI test, the type of test will be located under the qualifications section of the job posting. If you are invited to a test session, we strongly recommend you review and complete the practice test as well as review the testing brochure for your respective test. The practice test information and test brochures can be located by going to the EEI website, http://www.eei.org/practicetests , numberLogon ID: entergy, password: practice test (2 words). Also, keep in mind that the actual test is timed; you should practice timing yourself while doing the practice tests. The practice test information and test brochures can be located by going to the EEI website, http://www.eei.org/practicetests , numberLogon ID: entergy, password: practice test (2 words).Travel expenses incurred in connection with EEI testing are non-reimbursable.

In addition to EEI testing there is also Fit-for-Duty testing which will identify and assess the abilities and skills needed for certain jobs. If this position does require Fit-for-Duty testing, the type of test will be located under the qualifications section of the job posting.

WORKING CONDITIONS:
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.