Analyst - ISOC, Infrastructure Security

Are you ready to be part of a company that's not just talking about the future, but actively shaping it? Join The AES Corporation (NYSE : AES), a Fortune 500 company that's leading the charge in the global energy revolution.

With operations spanning 14 countries , AES is committed to shaping a future through innovation and collaboration. Our dedication to innovation has earned us recognition as one of the Top Ten Best Workplaces for Innovators by Fast Company in 2022.

And with our certification as a Great Place to Work , you can be confident that you're joining a company that values its people just as much as its groundbreaking ideas.

AES is proudly ranked #1 globally in renewable energy sales to corporations, and with $12.7B in revenues in 2023 , we have the resources and expertise to make a significant impact as we provide electricity to 25 million customers worldwide.

As the world moves towards a net-zero future, AES is committed to meeting the Paris Agreement's goals by 2050. Our innovative solutions, such as 24 / 7 carbon-free energy for data centers, are setting the pace for rapid, global decarbonization.

If you're ready to be part of a company that's not just adapting to change, but driving it, AES is the place for you. We're not just building a cleaner, more sustainable future - we're powering it.

Apply now and energize your career with a true leader in the global energy transformation.

The Analyst-ISOC, Infrastructure Security position directly supports the AES Infrastructure Security organization for all ongoing activities that serve to provide access to and protect the confidentiality, integrity, and availability of employee and business information.

This follows compliance with organizational policies and procedures along with regulatory requirements including the North American Electric Reliability Corporation (NERC) and Critical Infrastructure Protection (CIP) Security Standards.

This position is responsible for monitoring and processing alarm events (cyber & physical), intrusion system alerts, threat intelligence systems, and communications requests within the Security Operations Center.

The position requires working an 8-hour or 10-hour rotating shift that may include day, middle, late, weekends, and holidays.

Primary Duties and Responsibilities

The primary duties of Analyst-ISOC, Infrastructure Security are :

• Support compliance activities by monitoring facility access and initiate alarm procedures.
• Monitor multiple camera systems for activity and events, and process phone calls and email requests for events incoming from multiple company facilities.

Responsibilities include :

• Initiating notification system alerts for designated facilities.
• Performing logical investigations for company assets and personnel.
• Overseeing visitor management procedures and activities at secure locations.
• Performing physical access control log monitoring.
• Performing NERC CIP cyber access monitoring and executing alert procedures.
• Utilize security software systems to monitor cyber security threats and perform investigations or forensic analysis related to NERC CIP environments.
• Perform cyber and physical access control log monitoring, including : firewall logs, IPS logs, anti-virus logs, weblogs, and SIEM logs.

Security Analysts will also :

• Create and process security badge requests.
• Build summary reports, activity reports, and incident reports.
• Verify event threshold processing activities.

The Security Analyst will supervise the real-time intelligence system, carry out event analysis, and escalate threat detection responses according to internal incident response procedures.

The ability to prepare, maintain, and follow procedures for logging, reporting, and monitoring of security and regulatory operations is critical to this position.

The candidate must be able to c ommunicate optimally with internal and external customers, respond to requests for supporting information, and perform other duties as assigned.

This position is a NERC-regulated position. As such, the incumbent is required to maintain an active DHS Transportation Workers Identification Credential (TWIC).

Additionally, the incumbent will be required to complete annual NERC and other compliance training and participate in the Incident Response Team (IRT).

Qualifications

This position will require excellent problem-solving and decision-making skills, the ability to work with minimal supervision, and the ability to perform duties optimally in emergencies.

Primary qualifications include :

2-5 years of security or computer experience, including systems administration or network experience.

Experience in Microsoft Active Directory, DNS, system architecture, storage solutions, virtual machine, or other Information Technology related experience is desired.

C yber and physical alarm system event processing, dispatch operations, emergency notification systems, computer operations, camera system monitoring, or alert analysis experience.

Meet the internal on-the-job training expectations and successfully test against ISOC systems within twelve months.

Interpret technical manuals and write procedures and guideline documentation.

Strong report-writing skills.

Communicate as a native English speaker.

Certification(s) in Security-related fields is desired; ASIS APP, PSP or CPP, CompTIA, E / CH, CISSP, CISA or SANS, or technical certification in Cisco, Microsoft, Linux, or Unix.

Preferred :

An ideal candidate will have two or more years' experience in the Energy or Utility industry, experience supporting a 24 x 7 real-time operations environment, experience supporting systems subject to regulatory compliance requirements, or experience with FERC, NERC, RFC, MISO, or PJM.

AES is an Equal Opportunity Employer who is committed to building strength and delivering long-term sustainability through diversity and inclusion.

Respecting all backgrounds, differences and perspectives enables us to improve the lives of our people, customers, suppliers, contractors, and the communities in which we live and work.

All qualified applicants will receive consideration for employment without regard to sex, sexual orientation, gender, gender identity and / or expression, race, national origin, ethnicity, age, religion, marital status, physical or mental disability, pregnancy, childbirth, or related medical condition, military or veteran status, or any other characteristic protected under applicable law.

E-Verify Notice : AES will provide the Social Security Administration (SSA) and if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.