Sr Info Security Analyst

Want an Evergy job? See all of our current job openings for energy industry jobs.

Job Description

Sr Info Security Analyst - ( INF
00FA
)

JOB TITLE: Sr Info Security Analyst
REQUISITION : INF
00FA

DEPARTMENT: Information Security – Topeka General Office or Kansas City Headquarters
LOCATION: Topeka, KS
Kansas City, MO
PAY RANGE:
Sr Info Security Analyst: $94,600 - $126,100
Scheduled

Work Hours:

Monday - Friday, 7:00 a.m.

- 4:00 p.m. 60% in office, 40% remote (Other hours as required)

Summary of

Primary Duties and Responsibilities:

This position provides support to ensure compliance with North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) standards and Evergy Corporate Information Security Policies. The position will encompass the task of overseeing and managing networking systems, while also ensuring the efficacy of firewall-based security measures. It's imperative to accurate documentation concerning vital cyber assets for safeguarding purposes. The individual will operate in a collaborative, cross-functional manner, working closely with vendors, engineers, operators, technicians, and IT personnel.

Duties and Responsibilities:

• Implement, administer, and optimize cybersecurity controls including SIEM, EDR/XDR, email security, network detection and response (NDR), cloud security, identity security, and security automation platforms.
• Research, implement, and maintain cybersecurity technologies and best practices across on-premises, cloud, and hybrid environments.
• Provide recommendations that enhance the organization's cybersecurity strategy, risk posture, resiliency, and adoption of emerging technologies.
• Monitor, investigate, and respond to cybersecurity events, alerts, and incidents using SIEM, EDR, NDR, SOAR, cloud, and identity security monitoring platforms.
• Participate in incident response, threat hunting, playbook development, threat mitigation, and recovery activities to reduce organizational cyber risk.
• Perform cybersecurity risk assessments and provide recommendations to mitigate identified threats and vulnerabilities while aligning with organizational risk tolerance.
• Protect enterprise information, operational technology (OT), cloud resources, and critical infrastructure assets through implementation of security controls and monitoring processes.
• Support cybersecurity governance, regulatory compliance, and audit activities, including NERC CIP, NIST, CIS Controls, and other applicable regulatory frameworks.
• Lead or support cybersecurity risk assessments, vulnerability assessments, and remediation efforts across technology environments.
• Mentor junior analysts and provide technical guidance during security investigations and projects.
• Provide operational support for cybersecurity technologies and participate in incident response and on-call activities as required
• Participate in an on-call rotation supporting cybersecurity operations, incidents, and critical security technologies.

Education and Experience Requirements:

• A bachelor's degree is typically required in Information Systems, Computer Science or related field. Relevant cybersecurity certifications such as CISSP, GIAC, Security+, CySA+, CCSP, or equivalent industry-recognized certifications are preferred.
• Successful candidates typically possess seven or more years of progressively responsible experience in cybersecurity, information security, risk management, incident response, security operations, compliance, or related technology disciplines.
• Demonstrated technical aptitude and the ability to evaluate, learn, and apply emerging technologies, security concepts, and industry best practices are required. Must be capable of independently analyzing security threats, vulnerabilities, risks, and operational issues and providing effective recommendations for remediation and risk reduction.
• Strong oral and written communication skills are required, including the ability to communicate technical concepts, risks, and recommendations to technical, operational, and executive audiences.

Skills, Knowledge, and Abilities

Required:

• Ability to communicate effectively with technical and non-technical stakeholders across the organization and with external partners, vendors, auditors, and regulatory entities.
• Working knowledge of security operations, incident response, threat detection, vulnerability management, security monitoring, threat intelligence, security…