Security Spec Lead - Digital Forensics Analyst

AEP; Columbus (OH); On-site; USD 116,000 - 151,000; Full time

Benefits offered by this job

401(k) match

AEP Pension

Comprehensive benefits

Job summary

American Electric Power (AEP) is seeking a Security Spec Lead - Digital Forensics Analyst to guide complex investigations and security projects. You will lead end-to-end investigations, mentor teammates, and shape incident response across HR, Legal, and IT teams.

The role requires deep forensics expertise across Windows, Linux, MacOS, mobile, and cloud. You will document findings, develop policies, and support risk-reduction initiatives while communicating clearly to executives.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.
• Deep understanding of Windows, Linux, MacOS, iOS and Android.
• Experience with malware reverse engineering and analysis.
• Strong investigative and reporting experience for complex incidents.

Responsibilities

• Conduct end-to-end investigations of internal and external matters.
• Prepare findings reports for HR, Legal, and stakeholders.
• Develop and maintain Digital Forensics policies and procedures.
• Lead risk-reduction and post-incident lessons learned.

Skills

Security clearance

Windows/Linux/MacOS

Mobile forensics

Malware analysis

SIEM/log analysis

Forensic tools

Education

Bachelor's degree or equivalent experience

Tools

Splunk

Digital forensics tools

Job description

Security Spec Lead - Digital Forensics Analyst

Location: 2 Locations

Category: Security_familyGroup

Job Summary

Responsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response. Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.

Job Description

What You'll Do

Essential Job Functions & Tasks

• Conduct end-to-end investigations of internal and external matters.
• Prepare findings reports for HR, Legal, Ethics, Physical Security, and other stakeholders
• Develop and maintain Digital Forensics policies and procedures documentation
• Support risk-reduction projects, including post-incident lessons learned
• Serve as a technical SME for Insider Threat, DLP, and cyber investigations
• Produce clear investigative and analytic reports for technical and executive audiences
• Maintain tools and technologies pertaining to Digital Forensics collection and analysis

Required Qualifications and Skills

• Ability to obtain and maintain a U.S. government security clearance
• In-depth understanding of Windows, Linux/Unix, MacOS, Android and iOS operating systems and interconnected network devices
• Understanding of mobile device forensics and evidence collection techniques
• Experience with malware reverse engineering and analysis
• Understanding of anomalous user activity monitoring and policy violation investigations
• Ability to use internal and external log sources, forensic tools, and established investigative methods to determine incident source and scope
• Work independently while maintaining strict confidentiality throughout investigations which sometimes involve high pressure situations or rapidly changing priorities
• Communicate clearly, verbally and in writing, with strong analytical and critical-thinking skills
• Handle sensitive and confidential material appropriately
• Understanding of forensic capture and analysis methodologies and evidence chain of custody procedures

Preferred Qualifications

• Bachelor's degree or equivalent experience in cybersecurity, digital forensics, computer science, or related field
• Experience with standard forensic methods and leading collection and analysis tools
• Deep experience conducting technical investigations or root cause analysis in complex environments
• Experience identifying insider risk indicators through analytics tools
• Understanding and experience with digital forensics in a cloud environment
• Understanding of threat actor tactics, techniques, and procedures
• Familiarity with electric utility operations, IC/SCADA, or critical infrastructure protection frameworks such as NERC CIP
• Working knowledge of programming languages and Splunk query development
• Ability to apply AI to threat detection and analysis
• Understanding and experience with security monitoring tools, SIEM platforms, and endpoint detection solutions
• Ability to work and lead in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teams
• Knowledge of cyber investigations and incident response processes
• Experience with case management and evidence handling procedures
• Experience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies

Preferred Certifications and Courses

• SANS Forensics Certifications (Ex. GASF, GCFA, GCFE, GREM, GNFA)
• Computer Hacking Forensic Investigator (CHFI)
• GIAC Certified Incident Handler (GCIH)
• Vendor specific certification for industry leading forensics tools

What We're Looking For:

Education requirements are listed below:

• Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).

Work Experience requirement listed below:

• 7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

What You'll Get:

• Base salary
• Annual bonus
• Long-term incentive
• 401(k) match
• AEP Pension
• Comprehensive benefits package designed to support and enhance the overall well-being of employees.

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation

$116,255.00 - $151,132.50

Physical Demands

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Equal Employment Opportunity

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.

“AEP offers an outstanding group of people to be a part of. The AEP culture values your integrity and awards your hard work.”

AEP seeks experienced Executive Protection (EP) Agents/Specialists to provide professional, discreet protective services for corporate executives and their families. This role is to support short-term, long-term, and event-based assignments in domestic and international environments. Agents/Specialists must be capable of operating independently or as part of a layered protective team, while integrating with executive leadership, corporate security teams, and local authorities. Conduct advance-work and create comprehensive security plans for all local, domestic, and international travel, events, and off-site meetings. Coordinate with other EP teams, law enforcement, executive drivers, and administrative staff to support all movement(s) logistical needs.

The Security Specialist - Identity & Access Management (IAM) is responsible for supporting and delivering Identity and Access Management capabilities across the enterprise. This position serves as an IAM Subject Matter Expert (SME) and participates in the analysis, design, implementation, support, governance, and continuous improvement of IAM processes and solutions. The role works closely with business partners, security teams, architects, developers, auditors, and technology teams to ensure secure, compliant, and efficient access management practices are implemented throughout the identity lifecycle. Responsibilities include gathering and documenting requirements, evaluating technical and functional solutions, assessing risks and controls, supporting IAM operations, and contributing to IAM strategy and modernization initiatives. The successful candidate possesses strong communication, analytical, problem-solving, documentation, and relationship management skills. This individual must be capable of translating business requirements into technical solutions while balancing security, usability, compliance, and operational efficiency.

Responsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response. Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.

AEP offers generous time off, competitive pay, and educational opportunities to help employees advance their careers.

Our culture is purpose-driven and team-oriented: we combine innovation with a customer-first focus to deliver reliable energy and brighter futures.