Security Monitoring & SIEM Engineer

Entergy; New Orleans (LA); On-site; USD 95,000 - 120,000; Full time

Job summary

Entergy in New Orleans is seeking an Information Security Engineer to maintain and evolve its security engineering function. The role focuses on real-time analysis of events and alerts, deploying monitoring tools, and coordinating security capabilities across the enterprise.

You will work with CSOC, TVM, and other teams in a 24x7 environment, implement SIEM and endpoint security, review logs, and drive improvements to protect IT and OT assets including power generation and substations.

Responsibilities

• Implement monitoring policies, reference architectures, and procedures complying with regulatory requirements.
• Ensure security of internal/external parties and enterprise systems.
• Execute strategy and roadmap for SIEM and Endpoint Security toolsets.
• Drive security maturity to deliver world-class Cyber Security.
• Lifecycle management of SIEM and endpoint tools, upgrades and maintenance.
• Protect IT and OT assets including power generation, nuclear plants, SCADA, AMI.
• Collaborate with CSOC, Threat & Vulnerability Management, and management in a 24x7 environment.
• Monitor, analyze, and correlate logs to identify advanced threats.
• Assist in maintaining documentation and evidence for after-action reports.
• Monitor regulatory developments and industry best practices.
• Accountable for security engineering across devices and hosting models.
• Work with teams to implement monitoring use cases.
• Deliver KPIs to measure effectiveness and report trends.
• Support security orchestration and automation opportunities.
• Collaborate to onboard new systems to monitoring standards.
• Oversee and review junior resources as needed.

Job description

Entergy in New Orleans is seeking an Information Security Engineer to maintain and evolve its security engineering function. The role focuses on real-time analysis of events and alerts, deploying monitoring tools, and coordinating security capabilities across the enterprise.

You will work with CSOC, TVM, and other teams in a 24x7 environment, implement SIEM and endpoint security, review logs, and drive improvements to protect IT and OT assets including power generation and substations.