Cyber Security Analyst I or II

Date: Nov 14, 2022

Location: The Woodlands, Texas, United States

Company: Entergy

Posting End Date: 11/30/2022 

Work Place Flexibility: Hybrid 

 

***This role may be filled in Little Rock, AR; New Orleans, LA; Jackson, MS; or The Woodlands, TX***

***The official title for this role will be Info Sec Analyst***

***This position may be filled as an Info Sec Analyst I or II depending on the candidate’s experience and qualifications***

 

Brief Position Description

The Information Security Analyst will be primarily responsible for daily monitoring and response within the Cyber Security Operations Center for Data Loss Prevention (DLP).  The primary duties of the Information Security Analyst will include monitoring and responding to alerts within the DLP tool, as well as protecting corporate data assets using technologies through the implementation of practices and procedures.  This position will interact with various business units across the organization and requires partnering with the Data Protection Task Force.

 

Key responsibilities include:

  • Monitors DLP alerts, supports management of DLP tools for on-premises and cloud infrastructure
  • Prioritizes alerts, issues, and performs triage to confirm a real security incident is taking place to perform escalation as needed to minimize the impact of risks
  • Execute on strategy and technology roadmap for the CSOC data protection function
  • Assist in forensic investigations, as necessary
  • Provide some rotating or on-call support afterhours and weekends to support the business needs
  • Participate in training and exercises to ensure CSOC data protection team proficiency
  • Stay up to date of control frameworks and standards around data protection 

 

Education needed

Associates or Bachelors degree in Computer Science, Cyber Security, Information Systems, Engineering or a related discipline or equivalent work experience.

 

Experiences needed

Info Sec Analyst I: 0-2 years of cyber security experience across multiple disciplines (monitoring, event correlation, configuration, behavior analytics, application security, database, risk management, project management, etc.)

 

Info Sec Analyst II: 2+ years of cyber security experience across multiple disciplines (monitoring, event correlation, configuration, behavior analytics, application security, database, risk management, project management, etc.)

 

Hands on experience working with Data Loss Prevention tools, event management and incident response within a 24/7 SOC environment is a plus

  • Rotating on-call availability to include afterhours and weekends
  • Ability to work effectively with team members and with customers
  • Solid organizational and time management skills

 

Minimum knowledge, skills, and abilities required of the position

  • Hands-on technical execution and process management skills
  • Demonstrated understanding of regulated, personal, and company sensitive data
  • Understanding of Regular Expressions
  • Familiar with data privacy regulations including PCI, HIPAA, and state and local privacy regulations
  • Commitment to customer service with solid oral, written, and social communication skills
  • Some knowledge of multiple Linux/UNIX OS platforms and Windows-based operating systems
  • Knowledgeable about security operations, cyber security monitoring
  • Knowledge of Information Security concepts related to Governance, Risk and Compliance
  • Some knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL
  • Ability to independently triage, correlate and escalate security events as needed to the CSOC
  • Understanding of current IT Security trends and best practices in technology
  • Self-motivated, willingness to learn
  • Capable of meeting deadlines
  • Rotating on-call availability to include afterhours and weekends
  • Ability to work effectively with team members and with customers
  • Solid organizational and time management skills

 

 Professional certificates, licenses, etc., desired for the position

ISACA certification, such as SSCP, Security +, GCIA are a plus

Vendor credentials offered by Data Loss Prevention technology companies are a plus

 

#LI-JL1

#LI-Hybrid

 

Primary Location: Texas-The Woodlands Arkansas : Little Rock || Louisiana : New Orleans || Mississippi : Jackson || Texas : The Woodlands 
Job Function: Information Technology
FLSA Status: Professional
Relocation Option: No Relocation Offered
Union description/code: NON BARGAINING UNIT-NBU
Number of Openings: 1
Req ID: 109576
Travel Percentage:Up to 25%

 

An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click here to view the EEO page, or see statements below.

EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. 

The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click here and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Entergy Pay Transparency Policy Statement: The Entergy System of Companies (the Company) will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the Company’s legal duty to furnish information.  41 CFR 60-1.35(c). Equal Opportunity and Pay Transparency.

The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment.  Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours.

WORKING CONDITIONS:
As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.


Job Segment: Cyber Security, Information Security, Loss Prevention, Systems Engineer, Compliance, Security, Technology, Legal, Engineering