Information Security Engineer II

Job Title:

Information Security Engineer II

Location:

Charlotte, NC

Job Summary and Description:

An Information Security Engineer II at EPRI provides monitoring and response to security related events, facilitates vulnerability tracking/remediation, participates in the duty analyst rotation and offers solutions to the EPRI community concerning the computing security environment. This can range from solving simple configuration problems to recommendations of complex secure computing requirements. The Information Security Engineer II should have current up-to-date knowledge of computer, network and security technologies and needs to maintain and enhance such knowledge through education on an ongoing basis. This position involves customer contact and interaction thus requiring excellent people skills along with the technical requirements.

Key Responsibilities:

• Assist the management of Information Security in the development, implementation, verification and enforcement of security policies and guidelines.

• Assist in the development and maintenance of documentation that details our security environment, including but not limited to device build documents, policy documentation, topology diagrams, technical standards, operational procedures, and troubleshooting how-to's.

• Identify and mitigate vulnerabilities and attacks within the EPRI computing environment.

• Research, design, and implement new methods and technologies that may be applicable to securing EPRI while meeting applicable security policies and standards.

• Research new threats, attacks and vulnerabilities that may affect the EPRI computing environment to learn how to identify and react to them.

• Assist in responding to audits and in the remediation of findings from various testing and assessments.

• Install and configure new computer security packages.

• Install, update, and configure security devices and other hardware used in the protection of EPRI computing environment.

• Assist the management of Information Security in technical support issues, investigations and risk assessment.

• Seek out, troubleshoot and resolve security related computer or network problems.

• Respond to end user’s requests involving security related computing or networking problems.

• Work with other technical resources as needed within Information Technology services and resources across the sectors at EPRI to ensure security is factored into the evaluation, selection, installation and configuration of hardware and software solutions.

• Continue to be educated on new and emerging security risks and technologies that effect EPRI's computing environment.

• Assist in the development of new security architectures.

• Co-ordinate EPRI’s endpoint protection and participate in any required incident response.

• Mobile device security support.

• Share leadership responsibilities as delegated by project management.

• Familiarity with AI-powered platforms for automating repetitive tasks and improving efficiency.

• Display proficiency in SecDevOps and the automation of InfoSec processes/research.

Education and Experience:

• Bachelor's degree or equivalent experience desired.

• 4-6 year’s technical experience in related fields (information security, computers, telecom, networking, etc.).

• Strong knowledge of the Windows operating systems (Workstation & Server).

• Strong knowledge of other OSs (Apple, UNIX, Linux).

• Working knowledge of various security tools such as EPP, EDR, vulnerability management, threat intelligence, application assessment, etc.

• Working knowledge of SIEM solutions and SOC operations

• Working knowledge of virus/malware response.

• Working knowledge of at least 2 for the following scripting languages: a) Python, b) Perl, c) Linux/Unix Shell script, d) Java, e) PowerShell or f) C.

• Knowledge of TCP/IP and related Internet and network protocols.

• Knowledge of firewalls, IPS, IDS, HIPS, VPN, TLS/SSL, terminal servers, RAS and DNS.

• Knowledge of PCAP analysis for troubleshooting and traffic identification.

• Knowledge of various network switches, routers, hubs, etc.

• Strong knowledge of browsers and exploit methods.

Skills and Attributes:

• Motivated self-starter

• Committed to continuous education through formal and informal professional development

• Operates with discretion and confidentiality as appropriate

• Strong written and verbal communication

• Functions well in a team environment

The salary range for this position is $0 USD to $0 USD annually.

This salary range is an estimate, and the actual salary may vary based on various factors, including without limitation applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on applicant's geographic location.

This role is eligible to participate in EPRI’s annual incentive program. The amount of incentive varies and is subject to the terms and conditions of the plan.

This role is eligible to participate in EPRI’s standard employee benefit programs, which currently include the following: medical, dental, vision, 401k, STD/LTD and paid family leave, life and accident insurance, paid time off (flexible vacation, sick leave, and holiday pay).

EPRI participates in E-Verify, an online system operated jointly by the Department of Homeland Security and the Social Security Administration (SSA). EPRI uses the system to check the work status of new hires by comparing information from the employee's I-9 form against SSA and Department of Homeland Security databases.

EPRI is an equal opportunity employer. EEO/AA/M/F/VETS/Disabled

Together . . . Shaping the Future of Energy.

Together Shaping the Future of Energy

EPRI provides thought leadership, industry expertise, and collaborative value to help the electricity sector identify issues, technology gaps, and broader needs that can be addressed through effective research and development programs for the benefit of society.

If you need help during the application process, please contact us at View email address on click.appcast.io .