Information Security Engineer I or II

Entergy Services, LLC hires an Information Security Engineer I or II to maintain and evolve its security engineering function. The role operates security monitoring tools and processes, supports cyber defense and regulatory compliance, and coordinates security capabilities across the enterprise.

What you'll do:

• Implement necessary monitoring policies, reference architectures, and procedures in compliance with statutory and regulatory requirements covering internal and external parties, regulated and non-regulated physical, operational, and business systems throughout the enterprise
• Assist in satisfying specific requirements to ensure security of the environment in compliance with North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)
• Execute on strategy & technology roadmap for the implementation and maintenance of Security Information Event Management (SIEM) platform and Endpoint Security toolsets
• Drive process excellence and maturity to push the envelope on delivering a world-class Cyber Security function to protect Entergy against cyber threats
• Support life-cycle management of the SIEM platform and Endpoint Security tools, including assistance with coordination and planning of upgrades, new deployments, and maintenance of current operational systems
• Execute on world-class cyber defense capability for all information technology and operational technology assets including power generation units, nuclear plants, electric substations, SCADA, distribution automation, advanced metering infrastructure (AMI), email, and networks
• Work closely with Consolidated Security Operations Center (CSOC), Threat & Vulnerability Management (TVM), other internal/external teams and management in a 24x7 operational environment
• Execute the processes to monitor, analyze, and correlate logs and alerts across multiple platforms to identify advanced threats or incidents affecting the enterprise aiding in the development of use case content. This includes any relevant source of security logging or other data
• Assist in maintaining documentation and evidence to be used for after action reporting and/or legal evidence
• Monitor and respond to regulatory developments and industry best practices, with manager direction
• Accountable for execution of security engineering support of all device classes (server, desktop, mobile, etc.), hosting models (on-premises, external, cloud) and applications to which security platforms apply
• Work closely with all teams in Information Security to implement use cases for monitoring

What they're looking for:

• Info Sec Engineer I: 0-2 years of cyber security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.) or relevant education and training
• Info Sec Engineer II: 2 plus years of cyber security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, risk management, project management, etc.) or relevant education and training
• Demonstrated technical engineering and process management skills and the ability to advocate and support positive transformation within the broader information technology organization
• Knowledge of cloud monitoring strategies and techniques
• Knowledge of Data Loss Prevention practices and procedures
• Broad knowledge of multiple UNIX OS platforms and Windows-based operating systems
• Well-versed in security operations, cyber security monitoring, intrusion detection, and secured networks
• Strong knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
• Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO, ITIL, and ATT&CK
• Knowledge of current IT Security trends and best practices in technology, as well as monitoring best practices and tools
• Working knowledge with scripting languages such as Perl or Python
• Strong report writing and communication and ability to effectively communicate across the IT organization

Benefits:

• Hybrid work arrangement