About this role
Job title: Information Security Analyst Sr. Lead
Work Place Flexibility: Hybrid Legal Entity: Entergy Services, LLC This position is based out of The Woodlands, TX, New Orleans, LA, Little Rock, AR, West or Jackson, MS. Those outside of these areas would be required to relocate. Relocation assistance and sponsorship is not available for this posting.
Job Summary
The Sr Lead- Consolidated Security Operations Center (CSOC) is responsible for effective execution of 24/7 monitoring operations and incident management of cyber and physical security. Through maintenance and supervision of security programs, the Consultant Sr executes on guidance and ensures all processes and procedures are followed within CSOC teams. The Sr Lead will leverage artificial intelligence (AI) and Agentic AI tools in decision making of escalated security events.
Key responsibilities include:
- Direct eyes-on-glass monitoring and tier-1, and tier-2 support for events and incidents related to security operations in the corporate and OT environments
- Orchestrate AI agents to automatically execute playbook workflows
- Monitor security events from the cyber and physical security monitoring tools, end user notifications, etc. to determine security risk and responding accordingly
- Ensure performance of CSOC complies with specific requirements of North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)I
- Implement strategy and technology roadmap for the CSOC function
- Deliver process excellence and maturity to push the envelope on delivering a world-class CSOC function for all information and operational technology assets, including power generation units, nuclear plants, electric substations, SCADA, distribution automation, and advanced metering infrastructure (AMI)
- Assist in forensic investigations, as necessary
- Participates in response, triage and escalation of security events affecting the company's information assets and activities to Tier 2/3, OT IT Security operations or service provider as necessary
- Deliver on the response process to minimize the impact of risks
- Responsible for after-hours and weekend activities necessary to support business needs
- Assist with maintenance of KPIs within the CSOC team to ensure a high level of productivity, supportability and operational readiness
- Assist with project related work as required
- Assist with digitization efforts to automate routine playbooks and identify opportunities for automation
- Participate in training and exercises to ensure CSOC team proficiency
- Participate in post-incident reviews to identify lessons learned and best practices
Experience needed This position will be filled as an Info Sec Analyst Sr Lead. Six + years of cyber and/or physical security experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, application security, database, r