Information Security Analyst

Required Skills

• Experience in Vulnerability Assessment and Penetration Testing.
• Basic understanding of network, operating system, and web application security.
• Familiarity with OWASP Top 10 and Common Weakness Enumeration.
• Understanding of CVSS scoring and vulnerability prioritization.
• Exposure to tools such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar platforms.
• Basic understanding of cloud security concepts, with Azure preferred.
• Exposure to SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or Microsoft Defender XDR.
• Familiarity with Windows and Linux operating systems.
• Good analytical, problem-solving, written, and verbal communication skills.

Preferred Qualifications

• Two to four years of experience in vulnerability management is preferred.
• Familiarity with cybersecurity challenges in cloud-based energy market applications is a plus.
• A bachelor's degree in Computer Science, Information Security, or a related discipline is preferred.
• CISSP or CEH certification, including CEH in progress, is desirable.
• PowerShell or Python scripting exposure is an advantage.
• Knowledge of ISO 27001, SOC 2, NIST CSF, or CIS Controls is desirable.

Key Competencies

How the Team Works

• Energy Exemplar states that team members may work from home, in the office, or on the move, depending on where they work best.
• The description does not specify a role-specific workplace arrangement.