Security Specialist (Senior to Staff Level)

Job Posting End Date09-07-2026Please note the job posting will close on the day before the posting end date.Job Summary The Insider Protection Analyst is an individual contributor responsible for detecting, investigating, and responding to risks originating from within the organization, helping to protect AEP's people, data, and critical infrastructure from intentional and unintentional insider activity.This role operates within AEP's Cybersecurity Intelligence & Defense organization and serves as a highly technical frontline defender in safeguarding the enterprise against insider risk. Responsibilities include building and maintaining security analytics, user activity monitoring, and analysis utilizing data from a variety of Cybersecurity and IT tools. This position triages alerts, conducts focused monitoring, and translates risk signals into actionable findings that reduce organizational risk. This position also drives programs and policies to protect AEP from internal risk.Job DescriptionThe Insider Protection Analyst partners closely with internal business partners to provide support for user investigations, documents findings through case management systems, and escalates high-profile or sensitive matters for further investigation and response. This position also writes comprehensive reports and is able to translate highly technical findings into common business language for various stakeholders.What You'll DoEssential Job Functions & TasksImplement, and maintain analytical detections related to insider threat activity.Triage, respond to and investigate alerts related to insider threat activity.Develop and maintain policies, procedures, and documentation related to the insider threat program.Assist with projects and programs related to the reduction of insider riskConduct or support internal investigations, inquiries, data loss prevention and digital forensics efforts, including the documentation and referral of findings to appropriate stakeholders.Produce concise, insightful, and comprehensive investigative and analytic reports for both technical and executive audiences.Required Qualifications and SkillsAbility to obtain and maintain a U.S. government security clearance.Demonstrable technical ability to analyze disparate data sources related to insider risk monitoring and responseDemonstrable technical ability to build analytics detections pertinent to insider risk activityExcellent written and verbal communication skills, with strong analytical and critical-thinking ability.Ability to investigate handle sensitive and confidential information.Preferred QualificationsBachelor's degree in cybersecurity, information security, computer science, or related fieldExperience in cybersecurity, insider threat, security operations, digital forensics, data loss prevention, investigations, fraud detection, or intelligence analysisPrior Investigations experienceExperience conducting digital forensics in support of insider threat inquiries and investigations.Experience monitoring and investigating anomalous user activity and policy violationsExperience identifying insider risk indicators through analytics, UEBA platforms, and anomaly detection methodologies.Understanding of security monitoring tools, SIEM platforms, and endpoint detection solutionsExperience with Counterintelligence or an understanding of foreign intelligence entities, or international threat organizations and associated Tactics Techniques and Procedures used to carry out objectives.Ability to create and curate queries to detect and analyze data for potential insider activityExperience working in cross-functional environments involving HR, Legal, Compliance, Privacy, and Security teamsKnowledge of cyber investigations and incident response processesExperience with case management and evidence handlingExperience with data classification, information protection, data loss prevention (DLP), and sensitive data monitoring technologies.Familiarity with electric utility operations, industrial control systems (ICS/SCADA), or critical infrastructure protection frameworks (e.g., NERC CIP).Working knowledge of Python (and other programming languages)Ability to Use AI in threat detection and analysisKnowledge of application on defense mechanisms for AI usePreferred Certifications and CoursesCERT Insider Threat Program Manager (ITPM) or Global Counter-Insider Threat Professional (GCITP)GIAC Certified Forensic Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE)GIAC Certified Intrusion Analyst (GCIA)Computer Hacking Forensic Investigator (CHFI)What We're Looking For:Security Spec Sr (SG7)Education requirements are listed below:Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 3 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).Work Experience requirement listed below:2 or more years of Information Technology related experience; OR 1 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.Security Spec Prin (SG8)Education requirements are listed below:Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment). Work Experience requirement listed below:4 or more years of Information Technology related experience; OR 2 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.Security Spec Lead (SG9)Education requirements are listed below:Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical). Work Experience requirement listed below:7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.Security Spec Staff (SG10)Education requirements are listed below:Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical). Work Experience requirement listed below:10 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.Base Salary from $87,633.00 - $177,503.00 /year. In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!Compensation DataCompensation Grade:SP20-007Compensation Range:$87,633.00 - $177,503.00The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met. Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.SummaryLocation: Columbus, OH; Austin, TXType: Full time