JOB SUMMARY Plan, implement, upgrade, and monitor security measures for the protection of computer networks and information. Provides a full range of analytic duties using knowledge of multidisciplinary security concepts, principles and practices applicable to security administration. Develops, recommends and enhances preventive and detective controls. Monitors and verifies that ERCOT's internal and external computer security systems are protected from the latest threats and risks. Implements, monitors and maintains preventive and detective controls. This may include any combination of the following: Designs architectures and controls for cyber security. Monitors, evaluates and executes security procedures. Monitors computing resources for evidence of compromise and reporting security incidents. Responds to, and reports on, IT security incidents, providing initial assessment of impact severity and types of incidents being addressed. Analyzes compromised computing resources of routine to moderate complexity. Supports the development, documentation, deployment, review and maintenance of information security policies. Communicates information security requirements and principles. Ensures compliance with security related regulatory and corporate requirements. This position may be filled at any of several levels indicated below. JOB DUTIES 30 Monitors computing resources for evidence of compromise and reports security incidents, including initial assessment of impact severity and incident type 30 Investigates and analyzes computing resources for evidence of compromise, including complex systems, to improve security design, ensure policy compliance, and anticipate emerging threat profiles 30 Analyzes security breaches and participates as a member of the Incident Response Team, including serving in senior and leadership roles 30 Designs and supports cybersecurity monitoring programs, including technologies and processes 30 Enforces security policies and procedures by administering and monitoring security controls, reviewing violation reports, and investigating exceptions 30 Develops and implements mitigation strategies for threat reduction based on monitoring of IT systems 30 Conducts periodic operating system and application security assessments, recommending remediation actions to address vulnerabilities 30 Researches, evaluates, tests, and implements new or vendor-supplied security software solutions 30 Maintains up-to-date documentation and procedures for security software and system administration 30 Develops and supports technical security standards and incident investigation procedures to align with organizational policies 30 Reports security issues to responsible personnel and coordinates response and resolution efforts 30 Serves as a subject matter expert in assigned areas 30 Mentors and provides guidance to junior security team members 30 Continuously expands and applies knowledge of current and emerging security issues Position level is open depending on the candidate's previous experience that is identified. (Level 2 or Senior considered). EDUCATION 30 Bachelor's degree in Cyber Security, Computer Science, MIS, or a combination of education and experience that provides the applicant with knowledge equivalent to a major in of such fields is required at all levels EXPERIENCE 30 Level 2: Minimum 2 years (in excess of degree requirements stated above) of progressively responsible experience in IT security 30 Level 3: Minimum 3 years (in excess of degree requirements stated above) of progressively responsible experience in IT security 30 Senior: Minimum 5 years (in excess of degree requirements stated above) of progressively responsible experience in IT security CERTIFICATIONS & LICENSES 30 COMPTIA Security+ (required) 30 CISSP and/or other security certifications preferred for all levels WORK LOCATION - Taylor, TX: 30 Employees will be required to be on-site in Taylor, TX at minimum 2 days per week, or more, as needed based on the business needs as determined by management 30 On-site schedules are flexible or may be rotated based on business needs as determined by the Manager 30 Remote work is required to be performed from your Texas residence. 30 Employees may opt to work on-site more than required or 100% of the time The foregoing description reflects the minimum qualifications and the essential functions of the position that must be performed proficiently with or without reasonable accommodation for individuals with disabilities. It is not an exhaustive list of the duties expected to be performed, and management may, at its discretion, revise or require that other or different tasks be performed as assigned. This job description is not intended to create a contract of employment with ERCOT. Both ERCOT and the employee may exercise their employment-at-will rights at any time. #LI-DN Expected Salary Range: $90,000 - $124,000