Analyst - Isoc, Infrastructure Security

At AES, we raise the quality of life around the world by changing the way energy works. Everyone makes an impact every day in our small, global teams. Apply here to start an extraordinary career today. 

The Analyst-ISOC, Infrastructure Security position directly supports the AES Infrastructure Security organization for all ongoing activities that serve to provide access to and protect the confidentiality, integrity, and availability of employee and business information. This follows compliance with organizational policies and procedures along with regulatory requirements including the North American Electric Reliability Corporation (NERC) and Critical Infrastructure Protection (CIP) Security Standards.

This position is responsible for monitoring and processing alarm events (cyber & physical), intrusion system alerts, threat intelligence systems, and communications requests within the Security Operations Center. The position requires working an 8-hour or 10-hour rotating shift that may include day, middle, late, weekends, and holidays.

Primary Duties and Responsibilities

The primary duties of Analyst-ISOC, Infrastructure Securityare:

• Support compliance activities by monitoring facility access and initiate alarm procedures.
• Monitor multiple camera systems for activity and events, and process phone calls and email requests for events incoming from multiple company facilities.

Responsibilities include:

• Initiating notification system alerts for designated facilities.
• Performing logical investigations for company assets and personnel.
• Overseeing visitor management procedures and activities at secure locations.
• Performing physical access control log monitoring.
• Performing NERC CIP cyber access monitoring and executing alert procedures.
• Utilize security software systems to monitor cyber security threats and perform investigations or forensic analysis related to NERC CIP environments.
• Perform cyber and physical access control log monitoring, including: firewall logs, IPS logs, anti-virus logs, weblogs, and SIEM logs.

Security Analysts will also:

• Create and process security badge requests.
• Build summary reports, activity reports, and incident reports.
• Verify event threshold processing activities.

The Security Analyst will supervise the real-time intelligence system, carry out event analysis, and escalate threat detection responses according to internal incident response procedures. The ability to prepare, maintain, and follow procedures for logging, reporting, and monitoring of security and regulatory operations is critical to this position.

The candidate must be able to communicate optimally with internal and external customers, respond to requests for supporting information, and perform other duties as assigned.

This position is a NERC-regulated position. As such, the incumbent is required to maintain an active DHS Transportation Workers Identification Credential (TWIC). Additionally, the incumbent will be required to complete annual NERC and other compliance training and participate in the Incident Response Team (IRT).

Qualifications

This position will require excellent problem-solving and decision-making skills, the ability to work with minimal supervision, and the ability to perform duties optimally in emergencies. Primary qualifications include:

• 2-5 years of security or computer experience, including systems administration or network experience.

• Experience in Microsoft Active Directory, DNS, system architecture, storage solutions, virtual machine, or other Information Technology related experience is desired.

• Cyber and physical alarm system event processing, dispatch operations, emergency notification systems, computer operations, camera system monitoring, or alert analysis experience.

• Meet the internal on-the-job training expectations and successfully test against ISOC systems within twelve months.

• Interpret technical manuals and write procedures and guideline documentation.

• Strong report-writing skills.

• Communicate as a English .

• Certification(s) in Security-related fields is desired; ASIS APP, PSP or CPP, CompTIA, E/CH, CISSP, CISA or SANS, or technical certification in Cisco, Microsoft, Linux, or Unix.

:

An ideal candidate will have two or more years’ experience in the Energy or Utility industry, experience supporting a 24 x 7 real-time operations environment, experience supporting systems subject to regulatory compliance requirements, or experience with FERC, NERC, RFC, MISO, or PJM.

AES is an Equal Opportunity Employer who is committed to building strength and delivering long-term sustainability through and . Respecting all backgrounds, and perspectives enables us to improve the lives of our people, customers, suppliers, contractors, and the communities in which we live and work. All qualified applicants will receive consideration for employment without regard to sex, , , and/or expression, , , , , , marital status, physical or mental , , childbirth, or related medical condition, military or veteran status, or any other characteristic protected under applicable law. E-Verify Notice: AES will provide the Social Security Administration (SSA) and if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.