ICS Security Analyst

If end date is listed, the posting will come down at 12:00 am on that date:

About The Position

• Manages the daily operations, health and maintenance of Ameren's cybersecurity technology portfolio.
• Maintains a deep understanding of the threat landscape and ensures cybersecurity technology is effectively configured to detect threats.
• Ensures that cybersecurity plans, controls, processes, standards, policies and procedures are aligned with Ameren IT and cybersecurity standards.
• Develops, maintains and communicates Ameren's digital risk frameworks, governance models and compliance codes and standards.

Key responsibilities include:

• Develops familiarity and applies security principles within a single program, area or process.
• Assists in securing security measures to protect the organization's technology (e.g., applications, networks and systems).
• Assists in securing network and endpoint anti-virus, HIPS, disk encryption, and data loss prevention solutions.
• Provides support in monitoring networks for attacks, malicious software, intrusions and threats.
• Assists and develops familiarity with a single security process (e.g., either network or endpoint security) and prevention and detection techniques.
• Develops familiarity with vulnerabilities identifications; develops daily/weekly reports using vulnerabilities/threats data.
• Builds familiarity of organizational threat intelligence programs.
• Assists with application security team activities and supports applications security projects and programs.
• Understands and gains familiarity with a single business segment's (e.g., Power Operations, Transmission, Gas, Distribution, Nuclear) security networks and requirements.
• Implements remediation plans, under guidance of senior analysts.
• Provides cybersecurity and network support for operational systems.
• Works with and supports the overall process for defining, implementing and enforcing cybersecurity policies, standards, procedures and guidelines and controls.
• Maintains existing risk mitigation frameworks, makes updates and changes per new roadmaps/plans.
• Provides monitoring capabilities to assess the effectiveness of Digital controls.
• Supports cybersecurity engagement and outreach within Ameren.
• Familiarizes self with Ameren's cybersecurity strategies.
• Demonstrates awareness of existing policies and procedures.
• Supports programs and projects managed by the engagement team.
• Participates in incident response activities by following prescriptive procedures.
• May be required to provide on-call support for a 7x24x365 operation.
• Requests feedback on own work and provides feedback to others.

Qualifications

• Bachelor's degree required, preferably in engineering, mathematics, computer science, business, or cybersecurity.
• 0+ years of relevant experience required.
• Will consider candidates without a degree if they have shown/demonstrated having additional 2+ years of equivalent, relevant experience in the tools, systems, and initiatives leveraged by Ameren.
• Professional certification (e.g. Security+, Network+, OSCP, GIAC, CDH) preferred.

In addition to the above qualifications, the successful candidate will demonstrate:

• Demonstrates basic analytical skills.
• Conceptual knowledge of managing and securing technologies of the specific platform/area. Conceptual knowledge of defensive techniques - authentication mechanisms, intrusion mechanisms, networking.
• Conceptual knowledge of common security tools.

Additional Information

Ameren's selection process includes a series of interviews and may include a leadership assessment process. Specific details will be provided to qualified candidates.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, ethnicity, age, disability, genetic information, military service or status, pregnancy, marital status, sexual orientation, gender identity or expression, or any other class, trait, or status protected by law.