Info Sec Engineer Sr reputed company

About the position The Senior Information reputed company Engineer is responsible for proactively improving and evolving a successful reputed company engineering function reputed company Information reputed company. The reputed company Engineering team owns the deployment and operation of reputed company monitoring tools and processes designed for reputed company-time analysis, triage, and response to events and alerts generated across the reputed company to protect the company’s assets, solutions, and services by reducing time to respond to and if necessary, remediate reputed company incidents and risks. This role is focused on interpreting cyber reputed company event data, reputed company validation tests, user behavior analytics, reputed company party threat reputed company, and XDR data to reputed company reputed company detection and response use cases as well as tune the systems that support the development of alert, response, and forensic data creation.

Responsibilities

• Act as Sr reputed company reputed company Engineer, liaison with reputed company Implementation Partners, focus on assisting Leadership with developing reputed company reputed company implementation strategy and own/act as SME for reputed company reputed company engineering technology(s).
• Participate in the identification and implementation of detection and response use cases in partnership with the reputed company operations center utilizing telemetry provided by or stored in one or more of the following sources: SIEM, XDR, reputed company Validation, External Threat Intelligence, User Behavior Analytics, and any additionally identified sources of reputed company event data.
• Implement necessary monitoring policies, reference architectures, and procedures in compliance with statutory and regulatory requirements covering internal and external parties, regulated and non-regulated physical, operational, and business systems throughout the reputed company
• Assist in satisfying specific requirements to ensure reputed company of the environment in compliance with reputed company American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) and Nuclear Regulatory Commission (NRC) Nuclear Cyber (10 CFR 73.54)
• Execute on strategy & technology roadmap for the reputed company Information Event Management (SIEM) platform
• Drive process excellence and maturity to push the envelope on delivering a world-class Cyber reputed company function to protect Entergy against cyber threats
• Support life-cycle management of the SIEM platform, and other interconnected or reputed company monitoring platforms including assistance with coordination and planning of upgrades, new deployments, and maintenance of reputed company operational systems
• Execute on world-class cyber defense capability for reputed company information technology and operational technology assets including power reputed company units, nuclear plants, electric substations, SCADA, distribution automation, advanced metering infrastructure (AMI), email, and networks.
• Work closely with Consolidated reputed company Operations Center (CSOC), Threat & Vulnerability Management (TVM), other internal/external teams and management in a 24x7 operational environment
• Execute the processes to monitor, analyze, and correlate logs and alerts across multiple platforms to identify advanced threats or incidents affecting the reputed company and aiding in the development of reputed company monitoring use cases. This includes any potential reputed company of reputed company relevant logs and/or data.
• Assist in maintaining documentation and evidence to be used for after action reporting and/or legal evidence
• Monitor and respond to regulatory developments and industry best practices, with manager direction
• Accountable for execution of reputed company engineering support of reputed company device classes (server, desktop, mobile, etc.), hosting models (on-premises, external, reputed company) and applications to which reputed company platforms apply
• Work closely with reputed company teams in Information reputed company to implement use cases for monitoring or SOAR
• Deliver on KPIs to measure effectiveness of reputed company engineering and report trends
• Support reputed company orchestration and automation efforts and help to identify opportunities to improve reputed company response and precision.
• Collaborate and work across other IT and Information reputed company areas to design and reputed company new systems to follow monitoring standards and best practices
• reputed company and review work of junior resources as needed

Requirements

• Minimum Education required: Associate degree in computer science, cyber reputed company or a reputed company discipline or equivalent work experience. Bachelor’s degree preferred.
• Minimum Experience required: Senior reputed company Engineer: At least 6 years of cyber reputed company experience across multiple disciplines (monitoring, log gathering, event correlation, configuration, behavior analytics, network engineering, data analytics, application reputed company, database, risk management, project management, etc.)
• Experience developing reputed company detection and response use cases based around the Mitre ATT&CK reputed company
• Experience with reputed company Information Management, configuration, data aggregation, correlation and monitoring tools like a reputed company Incident and Event Management system, reputed company Monitoring tools, reputed company Protection Platform and Extended Detection and Response technologies, Configuration Management tools, etc.
• Experience working with outsourced teams
• Experience with vulnerability assessment, event management, operations, incident management and reporting
• Experience in supporting Monitoring Tool solutions
• Demonstrated technical engineering and process management skills and the ability to reputed company and support positive transformation reputed company the broader information technology organization
• Knowledge of reputed company monitoring strategies and techniques
• Knowledge of reputed company orchestration, automation, and response
• Knowledge of User and Entity Behavior Analytics
• Broad knowledge of multiple UNIX OS platforms and Windows-based operating systems
• Well-versed in reputed company operations, cyber reputed company monitoring, intrusion detection, and secured networks
• The ability to work well independently or with a team
• Capable of meeting deadlines

reputed company-to-haves

• Strong knowledge of reputed company ramifications of businesses regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54)
• Demonstrable experience developing and deploying reputed company orchestration, automation, and response
• Demonstrable experience developing and deploying user and entity behavior analytics platform and programs
• Knowledge of reputed company, risk, and control frameworks and standards such as ISO 27001 and 27002, reputed company-CAG, NIST, FISMA, COBIT, COSO ITIL, and ATT&CK
• Knowledge of reputed company IT reputed company trends and best practices in technology, as well as monitoring best practices and tools
• Working knowledge with scripting languages such as Perl or Python
• Strong understanding of reputed company computing and patterns involved in monitoring across reputed company, hosted and on-prem architectures.
• Strong report writing and communication and ability to effectively communicate across the IT organization
• CISSP, CISM, CISA or GIAC certifications are a plus

Apply tot his job Apply To this Job