Wait, What Do You Do?

Job Title: Information Security Analyst Senior PS Job Title: Info Sec Analyst Sr Work Place Flexibility: Hybrid Legal Entity: Entergy Services, LLC Job Summary As a Senior Threat and Vulnerability Management (TVM) Analyst, you will design, configure, and support the TVM Team in identifying, assessing, and remediating technical vulnerabilities across a global enterprise IT and OT infrastructure. You will be responsible for executing automated scans, prioritizing risks based on business impact, and collaborating with owners to track the timely patching of assets and applications. This role offers an advanced opportunity to exercise your expertise in risk analysis and security tooling within a complex, high-scale environment. Job Duties <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Scan All Assets: Run vulnerability scans across corporate networks, OT environments, web applications, APIs, and public/hybrid cloud infrastructure.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Audit Cloud Security: Continuous assessment of cloud workloads, identities, storage buckets, and configurations to detect security drift and misconfigurations.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Test Code & APIs: Perform Static (SAST) and Dynamic (DAST) application security testing, and audit API endpoints for data leakage and authentication flaws.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Filter Flaws: Eliminate false positives to isolate true risks threatening energy delivery systems, customer portals, and critical cloud infrastructure.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Assess Risk: Prioritize vulnerabilities using Threat Intelligence, CVSS scores, OWASP Top 10, OWASP API Security Top 10, and cloud-specific threat matrices.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Guide Remediation: Provide clear mitigation steps to IT engineers, substation OT technicians, software developers, and cloud infrastructure teams.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Ensure Compliance: Map vulnerability data directly to NERC CIP (including cloud-hosted BCSI requirements) and the NIST Cybersecurity Framework.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Report Risks: Draft executive risk reports, secure software metrics, and cloud compliance posture charts for leadership and federal regulatory auditors.</li> </ul> Required Skills <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Industry Experience: 5+ years in cybersecurity, with a preferred 2 years protecting a large enterprise with exposure to energy, utility, or industrial environments.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Technical Knowledge: Strong understanding of traditional Windows and Linux enterprise deployments, SCADA networks, PLC systems, microservices architectures, REST/GraphQL APIs, Cloud Security Posture Management (CSPM), Infrastructure as Code (IaC) security, and cloud identity management (IAM).</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Tool Proficiency: Mastery of vulnerability management tools, application security tools, and native cloud security CNAPP tools. Experience with scripting languages such as Perl or Python. Ability to leverage Artificial Intelligence (AI) to solve problems or automate work processes.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Regulatory Compliance: Practical knowledge of NERC CIP, NIST CSF, CIS Benchmarks, and secure coding standards.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Clear Communication: Ability to bridge the gap between corporate IT security, cloud architects, software developers, and field-level engineering constraints.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Certifications: Preferred credentials include CISSP, GICSP, GRID, CSSLP, CCSP, AWS Certified Security, or Microsoft Certified: Azure Security Engineer.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:8.0pt;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Proficiency: Capable of managing multiple tasks and meeting deadlines. Ability to work well independently or with a team. </li> </ul> Education required <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 8.0pt 0.0px;line-height:115%;font-size:10.0pt;font-family:arial, helvetica, sans-serif">Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).</li> </ul> #LI-DG1 #LI-HYBRID Primary Location: Texas-The Woodlands Louisiana : New Orleans || Arkansas : Little Rock || Mississippi : Jackson || Texas : The Woodlands Job Function: Corporate FLSA Status: Professional Relocation Option: Union description/code: NON BARGAINING UNIT Number of Openings: 1 Req ID: 124253 PS Job Title: Info Sec Analyst Sr Travel Percentage:Up to 25% An Equal Opportunity Employer, Minority/Female/Disability/Vets. Please click <a href="https://jobs.entergy.com/content/EEO/?locale=en_US">here </a>to view the EEO page, or see statements below. EEO Statement: The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated. Accessibility: Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please click <a title="here" href="mailto:humanr@entergy.com?subject=Accessibility" target="_blank" rel="noopener">here</a> and provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request. Additional Responsibilities: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties. <a title="Equal Opportunity" href="https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf" target="_blank" rel="noopener">Know Your Rights: Workplace Discrimination is Illegal</a> The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment. Please contact HRCompliance@entergy.com to schedule a time to review the affirmative action plan during regular office hours. WORKING CONDITIONS: As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties. Please note: Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.

Information Security Analyst Senior (The Woodlands, Texas, United States)