Security Operations IR/OT

AEP Service Corporation; Austin (TX); On-site; USD 99,000 - 129,000; Full time

Benefits offered by this job

Benefits package

Job summary

AEP Service Corporation in Austin, TX seeks an experienced cybersecurity professional to lead enterprise security initiatives focused on OT/ICS environments. You will direct incident response, threat hunting, and cyber resilience efforts across IT, OT, and cloud platforms.

Responsibilities include developing playbooks, coordinating with government partners, and mentoring team members to strengthen security practices across critical infrastructure.

Qualifications

• Bachelor's degree or associate degree with 2 years relevant experience in IT security or cybersecurity (or equivalent program)
• 4+ years of Information Technology security experience preferred for seniority
• Strong knowledge of cybersecurity concepts, OT/ICS, and risk management

Responsibilities

• Lead the Cyber Intelligence & Response Center (CIRC) in prevention, identification, and response across IT, OT, and cloud environments.
• Analyze logs, network traffic, and endpoint telemetry to support investigations and containment efforts.
• Develop and deliver response plans, after-action reports, and runbooks for cyber events in critical infrastructure.
• Collaborate with government and industry partners to share threat intelligence and best practices.

Skills

Incident response

OT/ICS security

Threat intel

Forensics

Education

Bachelor's or associate degree in IT/security

Tools

SIEM platforms

Network analysis tools

Job description

Job Posting End Date08-30-2026Please note the job posting will close on the day before the posting end date.Job SummaryResponsible for moderate-scale security assignments with limited direction from senior team members. Develops and maintains necessary documentation of security systems, projects, and/or processes to ensure unified understanding of system details. Performs and analyzes security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Identifies and documents potential mitigations/remediations and creates reports of findings with identified risk response. Participates in the review, evaluation, and recommendation of emerging security technologies. More involved in advanced level implementation, support, and/or usage of technical solutions. Assists with problem solving, decision-making, and functional area knowledge.Job DescriptionResponsible for enterprise-wide cybersecurity initiatives focused on protecting industrial control systems and operational technology. Provide direction to team members and lead efforts in the review, evaluation, and recommendation of emerging security technologies relevant to critical infrastructure. Lead and participate in security incidents and projects, directing assignments that enhance the security posture of the organization. Demonstrate advanced problem-solving and decision-making skills, along with deep knowledge of the cybersecurity landscape, particularly in industrial environments. Frequently involved in the implementation, support, and utilization of technical solutions tailored to safeguard operational technology. Mentor team members and provide functional and technical guidance to ensure effective security practices are upheld.* Applicants must be eligible to obtain a US security clearance*What you’ll do:Essential Job Functions & TasksLead the Cyber Intelligence & Response Center (CIRC) in the prevention, identification, and response of cyber threats across IT, OT, and cloud environments.Analyze logs, network traffic, endpoint telemetry and various other data sources to support investigations.Execute containment, eradication, and recovery steps in coordination with stakeholders while balancing the safety and operational continuity in industrial systems.Investigate incidents and produce concise response plans and after action reports covering containment, eradication, recovery, evidence preservation, remediation, and root cause analysis.Contribute to tabletop exercises, simulations and readiness activities focused on cyber events affecting operations.Participate in the development and refinement of playbooks, runbooks, and response procedures.Analyze cyber threat intelligence products to assess impacts on critical infrastructure.Coordinate incident response efforts with U.S. government agencies and industry peers.Collaborate on cyber threat and security best practices with government and industry partners.Maintain expertise in OT protocols, ICS, and SCADA systems for comprehensive threat detection.Familiar with SIEM platforms and network analysis tools used in OT environments.Conduct forensic analysis of host and network events to support investigations.Prepare and deliver engaging cyber threat briefings to diverse audiences.Reverse engineer malware to understand threats targeting industrial control systems.Communicate security challenges effectively to senior leadership.Promote diversity and ensure team members receive training for skill development.Create presentations on cybersecurity topics and simplify complex concepts.Formulate solutions for advanced security challenges and identify process improvements.Motivate the team to learn about security trends and foster professional growth.Nice to Have:Demonstrable experience in one or more of the following disciplines:Incident Response AnalystCIRC/SOC LeadThreat Intelligence or Counterintelligence AnalystCyber Threat Hunting AnalystMalware Reverse EngineerOperational Technology Specialist, particularly in securing industrial control systems and related environments.Certifications:CSFA, GCCC, GCDA, GCED, GCFA, GCFE, GCIA, GCIH, GCIP, GCTI, GDAT, GICSP, GMON, GOSI, GREM, GRID, GSOM, GXPNOSCP, OSEECERT Incident Response Process ProfessionalCREST Certified Host Intrusion AnalystCREST Certified Incident ManagerCREST Certified Malware Reverse EngineerCREST Certified Network Intrusion AnalystWhat We're Looking For:Education requirements are listed below:Bachelor's degree or associate degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively, may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).Work Experience requirement listed below:4 or more years of Information Technology related experience; OR 2 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.What You'll Get:Base Salary from $98,993 - $128,689 /year. In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!Compensation DataCompensation Grade:SP20-008Compensation Range:$98,993.00 - $128,688.00The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.