Security Spec Lead - Digital Forensics Analyst

AEP Service Corporation; Austin (TX); On-site; USD 116,000 - 151,000; Full time

Benefits offered by this job

Annual bonus

Long-term incentive

401(k) match

AEP Pension

Comprehensive benefits

Job summary

AEP Service Corporation is seeking an experienced Senior Digital Forensics Investigator to lead large-scale security assignments and investigations. You will gather, analyze, and report on complex security incidents, mentor team members, and drive implementation strategies for security projects.

Responsibilities include preparing findings for stakeholders, developing policy procedures, and acting as a SME for insider threats, DLP, and cyber investigations, while maintaining confidentiality under

Qualifications

• Must be able to obtain and maintain a U.S. government security clearance.
• Proficient in Windows, Linux/Unix, macOS, Android, iOS for forensics and incident analysis.
• Experience with mobile device forensics and evidence collection techniques.

Responsibilities

• Conduct end-to-end investigations of internal and external matters.
• Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholders.
• Develop and maintain Digital Forensics policies and procedures.
• Support risk-reduction projects, including post-incident lessons learned.
• Serve as a technical SME for Insider Threat, DLP, and cyber investigations.

Skills

Security clearance

Cross-OS forensics

Mobile forensics

Malware analysis

Threat investigations

Log analysis

Evidence handling

Discretion/confidentiality

Education

Bachelor's degree

Associates degree +2 years

High School Diploma/GED +4 years

Tools

Forensic tools

Job description

Job Posting End Date10-30-2026Please note the job posting will close on the day before the posting end date.Job SummaryResponsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response. Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.Job DescriptionWhat You'll DoEssential Job Functions & TasksConduct end-to-end investigations of internal and external matters.Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholdersDevelop and maintain Digital Forensics policies and procedures documentationSupport risk-reduction projects, including post-incident lessons learnedServe as a technical SME for Insider Threat, DLP, and cyber investigationsProduce clear investigative and analytic reports for technical and executive audiencesMaintain tools and technologies pertaining to Digital Forensics collection and analysisRequired Qualifications and SkillsAbility to obtain and maintain a U.S. government security clearanceIn-depth understanding of Windows, Linux/Unix, MacOS, Android and iOS operating systems and interconnected network devicesUnderstanding of mobile device forensics and evidence collection techniquesExperience with malware reverse engineering and analysisUnderstanding of anomalous user activity monitoring and policy violation investigationsAbility to use internal and external log sources, forensic tools, and established investigative methods to determine incident source and scopeWork independently while maintaining strict confidentiality throughout investigations which sometimes involve high pressure situations or rapidly changing prioritiesCommunicate clearly, verbally and in writing, with strong analytical and critical-thinking skillsHandle sensitive and confidential material appropriatelyUnderstanding of forensic capture and analysis methodologies and evidence chain of custody proceduresPreferred QualificationsBachelor's degree or equivalent experience in cybersecurity, digital forensics, computer science, or related fieldExperience with standard forensic methods and leading collection and analysis toolsDeep experience conducting technical investigations or root cause analysis in complex environmentsExperience identifying insider risk indicators through analytics toolsUnderstanding and experience with digital forensics in a cloud environmentUnderstanding of threat actor tactics, techniques, and proceduresFamiliarity with electric utility operations, ICS/SCADA, or critical infrastructure protection frameworks such as NERC CIPWorking knowledge of programming languages and Splunk query developmentAbility to apply AI to threat detection and analysisUnderstanding and experience with security monitoring tools, SIEM platforms, and endpoint detection solutionsAbility to work and lead in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teamsKnowledge of cyber investigations and incident response processesExperience with case management and evidence handling proceduresExperience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologiesPreferred Certifications and CoursesSANS Forensics Certifications (Ex. GASF, GCFA, GCFE, GREM, GNFA)Computer Hacking Forensic Investigator (CHFI)GIAC Certified Incident Handler (GCIH)Vendor specific certification for industry leading forensics toolsWhat We're Looking For:Education requirements are listed below:Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).Work Experience requirement listed below:7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.What You'll Get:Base salaryAnnual bonusLong-term incentive401(k) matchAEP PensionComprehensive benefits package designed to support and enhance the overall well-being of employees.At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!Compensation DataCompensation Grade:SP20-009Compensation Range:$116,255.00 - $151,132.50The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.