Senior Cyber Security Analyst

Electric Reliability Council of Texas•Taylor, TX

7d•Hybrid

About The Position

At ERCOT, our diverse and dynamic work environment provides a platform on which employees can work together to build the future of the Texas power grid and wholesale market utilizing the latest technologies and resources. We encourage you to join our talented, dedicated workforce to develop world-class solutions for today and tomorrow’s energy challenges while learning new skills and growing your career. ERCOT is committed to fostering inclusion at all levels of our company. It is the cornerstone of our corporate values of accountability, leadership, innovation, trust, and expertise. We know that individuals with a wide variety of talents, ideas, and experiences propel the innovation that drives our success. An inclusive and diverse workforce strengthens us and allows for a collaborative environment to solve the challenges that face our industry today and in the future. This role independently performs complex cyber security engineering, administration, and vulnerability management activities in support of ERCOT's cyber security program. It involves administering, configuring, tuning, and maintaining security platforms, tools, controls, integrations, and related processes that protect ERCOT systems, applications, data, and critical infrastructure environments. The position coordinates vulnerability management activities, security technology implementation, control support, documentation, and remediation tracking across assigned areas of responsibility. It also works with cyber security, IT, business, and vendor teams to strengthen security capabilities, address identified risks, and support regulatory compliance. Additionally, it provides guidance to less experienced analysts and contributes to process improvement, standards development, and operational maturity.

Requirements

Minimum 5 years job related work experience in excess of degree requirements
Bachelor's Degree: Cyber Security, Computer Science, MIS, or related discipline (Preferred) or a combination of education and experience that provides equivalent knowledge to a major in such fields is required

Nice To Haves

CISSP Certified Information Systems Security Professional (Preferred)
Any SANS Security Certification (Preferred)
Any other relevant cybersecurity certification (Preferred)

Responsibilities

Administers, configures, tunes, monitors, and maintains assigned cyber security platforms, tools, controls, integrations, and related processes.
Leads implementation, testing, lifecycle management, and improvement of security technologies across on-premises, cloud, hybrid, and emerging technology environments.
Performs vulnerability management activities, including vulnerability review, validation, prioritization, reporting, remediation coordination, exception review, and risk-based tracking.
Coordinates with IT, business, cyber security, and vendor teams to implement security solutions, address identified risks, and support remediation activities.
Develops and maintains technical documentation, procedures, standards, operational guidance, and support materials for assigned security platforms and processes.
Reviews security configurations, control effectiveness, system activity, and operational data to identify improvement opportunities or potential security concerns.
Researches security technologies, vulnerabilities, configuration issues, and process improvements to strengthen assigned cyber security capabilities.
Supports compliance with corporate and regulatory requirements by maintaining evidence, supporting control activities, and assisting with security reviews or assessments.
Provides guidance to less experienced analysts and supports consistent execution of engineering, administration, vulnerability management, and control support practices.