Information Security Analyst Sr. Lead - Threat Hunter

Job Title:

Information Security Analyst Sr. Lead - Threat Hunter

Work Place Flexibility: Hybrid

Legal Entity: Entergy Services, LLC

Primary

Location:

The Woodlands, TX;
Little Rock, AR;
Jackson, MS;
New Orleans, LA (relocation required otherwise)

The Cyber Threat Hunter will proactively detect and respond to advanced threats that evade traditional tools. Leveraging threat intelligence, behavioral analytics, AI and agentic AI tools, the hunter will uncover hidden risks and coordinate findings with the Entergy CSOC to protect LAN/WAN, IT‑OT and cloud infrastructure.

• Create and refine threat models to identify gaps in defensive controls.
• Utilize threat intelligence to develop and test threat hypotheses.
• Execute automated hunting techniques, analyze results, perform forensic investigations, and deliver comprehensive reports.
• Orchestrate AI agents for threat hunts and manage security controls within AI systems.
• Develop and maintain SOPs, playbooks, and system workflows.
• Expand and support the Forensics program.
• Proactively hunt through systems and networks to detect advanced threats.
• Analyze network, host, and application logs, malware, and code.
• Implement and operate deception technologies and tactics.
• Prepare risk analyses and present findings to stakeholders.
• Lead hunts autonomously and recommend mitigations to improve security.
• Brief senior leaders and translate complex technical topics into non‑technical terms.
• Develop queries for CSOC detection of new attacks.
• Stay current with threat landscape, actors, and TTPs to enhance cybersecurity posture.
• Track high‑priority threat campaigns and advance notifications.
• Create automated workflows within security tools.
• C​ollaborate with business units to strengthen detection and response.
• Participate in post‑incident reviews for lessons learned.
• Apply knowledge of Industrial Control Systems (ICS) and Operational Technology (OT).
• Travel up to 25% as required.

Education: Bachelor’s degree in Cybersecurity, Information Security, IT, Computer Science, or equivalent experience (5–10 years). Certifications may substitute for a degree.

Experience: 5+ years in Security Operations, Incident Response, Detection Engineering, Red Team, or Cyber Threat Intelligence; proven threat hunting experience in a corporate environment.

• Experience with host‑ and network‑based monitoring and EDR/SIEM tools.
• Experience with offensive security strategies and assessment methodology.
• Experience using AI and agentic AI tools for hunting.
• Experience with digital forensics or major incident response.
• Knowledge of MITRE ATT&CK framework and AI capabilities.
• Proficiency in scripting (Power Shell, Python) and monitoring tools.
• Strong analytical, communication, and decision‑making skills.
• Ability to work independently and cross‑functionally.
• Experience with cloud, IT‑OT, and industrial control systems security.

• GIAC Certified Incident Handler
• GIAC Certified Forensic Analyst
• CISSP
• SANS GCIA – Intrusion Analyst
• SANS GMON – Continuous Monitoring Certification
• CCSP – Certified Cloud Security Professional
• GIAC Penetration Tester
• OSCP – Kali Linux Offensive Security Certified Professional

• Expertise in network and host analysis; knowledge of routing, switching, firewalls, proxies, load balancers.
• Proficient with scripting languages (Power Shell, Python); advanced knowledge of UNIX and Windows platforms.
• Strong familiarity with security frameworks: ISO 27001/27002, NIST, FISMA, COBIT, COSO, ITIL.
• Deep understanding of cyber security monitoring, intrusion detection, and secured networks.
• Knowledge of AI and agentic AI in security operations.

Office environment with minimal physical demands. The role may require additional hours, alternate locations, or duty during storms, outages, or emergencies. Exempt employees may not receive overtime for such duties.

Entergy System of Companies provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, or veteran status. Discrimination, harassment, or retaliation is prohibited. This policy applies to all employment terms and conditions and complies with applicable state and local laws.