Cyber Security Analyst

ERCOT • Taylor, TX

2d • $90,000 - $124,000 • Hybrid

About The Position

ERCOT is seeking a Cyber Security Analyst to provide support in solving all phases of a large and complex Critical Infrastructure Security (CIS) program. This role involves performing a full range of analytic duties using knowledge of multidisciplinary security concepts, principles, and practices applicable to security administration. The analyst will respond to and report on IT security incidents, providing initial assessment of impact severity and types of incidents being addressed. Additionally, they will perform periodic operating system and application security assessments of simple-to-moderate complexity, review for evidence of vulnerability or compromise, and assist with the implementation of resolutions. The role also includes monitoring computing resources for evidence of compromise and reporting security incidents.

Requirements

• Minimum of two years (in excess of degree requirements stated above) of progressively responsible experience in IT analysis or IT security administration (Level 2)
• Requires minimum 5 years related work experience in excess of degree requirements (Senior Level)
• Bachelor's Degree in Cyber Security, Computer Science, MIS, or related discipline (Preferred) or a combination of education and experience that provides equivalent knowledge to a major in such fields is required

Nice To Haves

• CISSP Certified Information Systems Security Professional (Preferred)
• Other Preferred Certs: Security+, GSEC, GCIH, GCIA and or GREM

Responsibilities

• Implements, monitors and maintains preventive and detective controls
• Monitors computing resources for evidence of compromise and report security incidents
• Analyzes compromised computing resources of routine to moderate complexity, to assist in improving security design and policy compliance, and to understand and document new threat profiles
• Develops and implements mitigation strategies for threat reduction based on monitoring of IT systems
• Researches, analyzes, designs, tests and implements new or vendor supplied security software solutions
• Provides up to date documentation and procedures on security software product administration
• Assists in the development of technical security standards to support policies, including creating, coordinating and monitoring standards and incident investigation procedures
• Works as a member of the Incident Response Team and perform analysis of security breaches
• Studies and grows current knowledge of security issues
• Supports the development, documentation, deployment, review and maintenance of information security policies
• Communicates information security requirements and principle
• Ensures compliance with security related regulatory and corporate requirements
• Uses software tools to gather system configuration information and vulnerabilities
• Promotes and delivers security-related material promoting security awareness
• Maintains current knowledge of security trends, vulnerabilities, threats, and mitigation methods
• Produces and presents compelling security-related training content
• Creates and consistently delivers awareness material promoting security awareness
• Designs cyber security monitoring program, including technologies and processes
• Investigates and analyzes computing resources for evidence of compromise and reports security incidents
• Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls
• Functions as a member in the security group’s Incident Response Team
• Analyzes complex compromised computing resources to improve security design and policy compliance, and to anticipate and prevent new threat profiles
• Develops and defends new technical security standards to support policies, including creating, coordinating and monitoring standards and incident investigation procedures
• Performs periodic and complex operating system and application security assessments to determine the likelihood of vulnerability or compromise, and prepares possible resolutions for implementation
• Analyzes security breaches
• Expands expert knowledge of security issues
• Reports issues to the department personnel responsible for the resource
• Serves as a mentor for junior security teammates

Benefits

• health, dental, vision, life insurance, long/short-term disability insurance, long-term care insurance, Section 125 Flexible Spending Account, and a Retirement Savings Plan
• 401(k) plans

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level