Information Security Engineer I or II

Entergy; New Orleans (LA); Sur place; USD 95 000 - 120 000; Plein temps

Résumé du poste

Entergy in New Orleans is seeking an Information Security Engineer to maintain and evolve its security engineering function. The role focuses on real-time analysis of events and alerts, deploying monitoring tools, and coordinating security capabilities across the enterprise.

You will work with CSOC, TVM, and other teams in a 24x7 environment, implement SIEM and endpoint security, review logs, and drive improvements to protect IT and OT assets including power generation and substations.

Responsabilités

• Implement monitoring policies, reference architectures, and procedures complying with regulatory requirements.
• Ensure security of internal/external parties and enterprise systems.
• Execute strategy and roadmap for SIEM and Endpoint Security toolsets.
• Drive security maturity to deliver world-class Cyber Security.
• Lifecycle management of SIEM and endpoint tools, upgrades and maintenance.
• Protect IT and OT assets including power generation, nuclear plants, SCADA, AMI.
• Collaborate with CSOC, Threat & Vulnerability Management, and management in a 24x7 environment.
• Monitor, analyze, and correlate logs to identify advanced threats.
• Assist in maintaining documentation and evidence for after-action reports.
• Monitor regulatory developments and industry best practices.
• Accountable for security engineering across devices and hosting models.
• Work with teams to implement monitoring use cases.
• Deliver KPIs to measure effectiveness and report trends.
• Support security orchestration and automation opportunities.
• Collaborate to onboard new systems to monitoring standards.
• Oversee and review junior resources as needed.

Description du poste

*Brief Position Description:

* The Information Security Engineer is responsible for maintaining and evolving a successful security engineering function within Information Security. The security engineering team owns successful deployment and operation of security monitoring tools and processes designed for real-time analysis of events and alerts generated across the enterprise to protect the company’s assets, solutions, and services by reducing time to triage security incidents and risks. This role coordinates security capabilities and industry best practices with all areas of the enterprise.

*Key responsibilities include:

* Implement necessary monitoring policies, reference architectures, and procedures in compliance with statutory and regulatory requirements covering internal and external parties, regulated and non-regulated physical, operational, and business systems throughout the enterprise Assist in satisfying specific requirements to ensure security of the environment in compliance with North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54) Execute on strategy & technology roadmap for the implementation and maintenance of Security Information Event Management (SIEM) platform and Endpoint Security toolsets. Drive process excellence and maturity to push the envelope on delivering a world-class Cyber Security function to protect Entergy against cyber threats Support life‑cycle management of the SIEM platform and Endpoint Security tools, including assistance with coordination and planning of upgrades, new deployments, and maintenance of current operational systems Execute on world‑class cyber defense capability for all information technology and operational technology assets including power generation units, nuclear plants, electric substations, SCADA, distribution automation, advanced metering infrastructure (AMI), email, and networks. Work closely with Consolidated Security Operations Center (CSOC), Threat & Vulnerability Management (TVM), other internal/external teams and management in a 24x7 operational environment Execute the processes to monitor, analyze, and correlate logs and alerts across multiple platforms to identify advanced threats or incidents affecting the enterprise aiding in the development of use case content. This includes any relevant source of security logging or other data. Assist in maintaining documentation and evidence to be used for after action reporting and or legal evidence Monitor and respond to regulatory developments and industry best practices, with manager direction Accountable for execution of security engineering support of all device classes (server, desktop, mobile, etc.), hosting models (on-premises, external, cloud) and applications to which security platforms apply Work closely with all teams in Information Security to implement use cases for monitoring Deliver on KPIs to measure effectiveness of security engineering and report trends Support security orchestration efforts and help to identify opportunities for automation Collaborate and work across other IT and Information Security areas to design and onboard new systems to follow monitoring standards and best practices Oversee and review work of junior resources as needed.