Senior Cyber Security Analyst

At ERCOT, our diverse and dynamic work environment provides a platform on which employees can work together to build the future of the Texas power grid and wholesale market utilizing the latest technologies and resources.  We encourage you to join our talented, dedicated workforce to develop world-class solutions for today and tomorrow’s energy challenges while learning new skills and growing your career.

ERCOT is committed to fostering inclusion at all levels of our company. It is the cornerstone of our corporate values of accountability, leadership, innovation, trust, and expertise. We know that individuals with a wide variety of talents, ideas, and experiences propel the innovation that drives our success. An inclusive and diverse workforce strengthens us and allows for a collaborative environment to solve the challenges that face our industry today and in the future.

JOB SUMMARY

Independently performs complex cyber security engineering, administration, and vulnerability management activities in support of ERCOT's cyber security program. Administers, configures, tunes, and maintains security platforms, tools, controls, integrations, and related processes that protect ERCOT systems, applications, data, and critical infrastructure environments. Coordinates vulnerability management activities, security technology implementation, control support, documentation, and remediation tracking across assigned areas of responsibility. Works with cyber security, IT, business, and vendor teams to strengthen security capabilities, address identified risks, and support regulatory compliance. Provides guidance to less experienced analysts and contributes to process improvement, standards development, and operational maturity.

JOB DUTIES

• Understands the basic principles, theories and concepts related to the profession and learns how to apply them within the ERCOT culture.
• Follows standard practices and procedures in analyzing situations or data from which answers can be readily obtained.
• Contributes to specific objectives and outcomes as directed.

ADDITIONAL JOB DUTIES

• Administers, configures, tunes, monitors, and maintains assigned cyber security platforms, tools, controls, integrations, and related processes.
• Leads implementation, testing, lifecycle management, and improvement of security technologies across on-premises, cloud, hybrid, and emerging technology environments.
• Performs vulnerability management activities, including vulnerability review, validation, prioritization, reporting, remediation coordination, exception review, and risk-based tracking.
• Coordinates with IT, business, cyber security, and vendor teams to implement security solutions, address identified risks, and support remediation activities.
• Develops and maintains technical documentation, procedures, standards, operational guidance, and support materials for assigned security platforms and processes.
• Reviews security configurations, control effectiveness, system activity, and operational data to identify improvement opportunities or potential security concerns.
• Researches security technologies, vulnerabilities, configuration issues, and process improvements to strengthen assigned cyber security capabilities.
• Supports compliance with corporate and regulatory requirements by maintaining evidence, supporting control activities, and assisting with security reviews or assessments.
• Provides guidance to less experienced analysts and supports consistent execution of engineering, administration, vulnerability management, and control support practices.

EXPERIENCE

• Requires minimum 5 years job related work experience in excess of degree requirements

EDUCATION

• Bachelor's Degree: Cyber Security, Computer Science, MIS, or related discipline (Preferred)
• or a combination of education and experience that provides equivalent knowledge to a major in such fields is required

CERTIFICATION

• CISSP Certified Information Systems Security Professional (Preferred)
• Any SANS Security Certification (Preferred)
• Any other relevant cybersecurity certification (Preferred)

WORK LOCATION

• Hybrid in Taylor, TX 2 days a week

The foregoing description reflects the minimum qualifications and the essential functions of the position that must be performed proficiently with or without reasonable accommodation for individuals with disabilities.  It is not an exhaustive list of the duties expected to be performed, and management may, at its discretion, revise or require that other or different tasks be performed as assigned.  This job description is not intended to create a contract of employment with ERCOT.  Both ERCOT and the employee may exercise their employment-at-will rights at any time. #LI-DN

ERCOT is firmly committed to equal employment for all qualified persons without regard to race, sex, medical condition, religion, age, creed, national origin, citizenship status, marital status, sexual orientation, physical or mental disability, ancestry, veteran status, genetic information or any other protected category under federal, state or local law.

Expected Salary Range:

$110,000 - $151,000