About the position
The Control Systems Security Analyst at CenterPoint Energy is a critical role responsible for overseeing the network and computer system infrastructure within the grid operations control center. This includes managing the physical network, network switches, firewalls, and various computer application systems. The analyst will administer Microsoft Windows Domain, tools, and endpoints, as well as Linux infrastructure for DNS, web proxy, log aggregation, and secure remote access. The position requires conducting security assessments of computer application systems and evaluating software patches to address system vulnerabilities. In addition to these responsibilities, the analyst will monitor and maintain cybersecurity controls within the control center environment, implementing and managing the electric system security program in accordance with North American Electric Reliability Corporation (NERC) cybersecurity standards. The role involves performing switch and firewall administration and configuration for Cisco and Checkpoint network infrastructure, managing and troubleshooting network access, and performing system administration on systems providing network services such as web proxy, DNS, and Microsoft Active Directory. Automation of system administration tasks using tools like PowerShell, Python, crontab, and Ansible is also a key function of this role. The analyst will follow change management processes and maintain documentation in a collaborative environment using trouble tickets and a knowledge repository. They will utilize event logs, packet captures, and other tools to identify misconfigured endpoints, network elements, and services, assisting in the resolution of connectivity problems reported by users.
Responsibilities
- Administer Microsoft Windows Domain, tools, and endpoints.
- Administer Linux infrastructure for DNS, web proxy, log aggregation, and secure remote access.
- Research networking requirements and provide networking solutions; install, support, and maintain networking infrastructure (switches/firewalls) within the control center environment.
- Conduct security assessments of computer application systems within the control center environment.
- Evaluate and implement software patches to address system vulnerabilities.
- Monitor and maintain cyber security controls within the control center environment.
- Implement and manage the electric system security program in accordance with NERC cyber security standards.
- Perform switch and firewall administration and configuration for Cisco and Checkpoint network infrastructure.
- Manage and troubleshoot network access through routing, policy, object, host firewall, system configuration, and user account changes.
- Perform system administration on systems providing network services e.g. web proxy, DNS, jump servers, and Microsoft Active Directory, SCCM, and WSUS.
- Automate system administration tasks using PowerShell, Python, crontab, and Ansible.
- Follow change management processes.
- Maintain documentation in collaborative environment using trouble tickets and knowledge repository.
- Use event logs, packet captures, and other tools to identify misconfigured endpoints, network elements, and services.
- Assist in resolution of connectivity problems reported by users.
Requirements
- Bachelor's degree in Computer Science, Engineering, Computer Technology, or Information Systems.
- Minimum one (1) year of experience working with enterprise network security, endpoint security, or network engineering/administration.
- Ability to maintain or quickly obtain certifications such as Check Point Security Administrator (CPSA), Cisco CCNA/CCNP, SANS GIAC, Microsoft, (ISC)2 or other recognized cybersecurity/networking certifications.
- Ability to communicate information effectively both orally and in writing.
- Possess a valid driver license.
- Possess and maintain appropriate background clearance.
Nice-to-haves
- Experience with enterprise network security tools and practices.
- Familiarity with cybersecurity frameworks and standards.
- Knowledge of incident response and threat hunting techniques.
Benefits
- 401(k) matching
- Flexible schedule
- Paid holidays
- Paid time off
- Paid training
- Tuition reimbursement
