> Markdown version of [/jobs/ext/2038127-information-security-analyst-senior](https://www.wearedevelopers.com/jobs/ext/2038127-information-security-analyst-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst Senior - **Company:** Entergy Corporation - **Location:** The Woodlands, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Information Leak Prevention, Linux, Perl (Programming Language), Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Python (Programming Language), Open Web Application Security, Cloud Services, Secure Coding, Software Vulnerability Management, Web Applications, Scripting, Software Security, Test Scripts, Cyber Threat Analysis, HybridCloud, Information Technology, Graphql, CIS Benchmarks, Static Application Security Testing, Vulnerability Analysis, Web Api, Microservices, Dynamic Application Security Testing - **Published:** August 12, 2026 - **Apply:** https://dejobs.org/x/x/0FDCFAD73D1E443EBFFD2235C69605F0/job/ ## About the Role * Industry Experience : 5+ years in cybersecurity, with a preferred 2 years protecting a large enterprise with exposure to energy, utility, or industrial environments. * Technical Knowledge : Strong understanding of traditional Windows and Linux enterprise deployments, SCADA networks, PLC systems, microservices architectures, REST/GraphQL APIs, Cloud Security Posture Management (CSPM), Infrastructure as Code (IaC) security, and cloud identity management (IAM). * Tool Proficiency : Mastery of vulnerability management tools, application security tools, and native cloud security CNAPP tools. Experience with scripting languages such as Perl or Python. Ability to leverage Artificial Intelligence (AI) to solve problems or automate work processes. * Regulatory Compliance : Practical knowledge of NERC CIP, NIST CSF, CIS Benchmarks, and secure coding standards. * Clear Communication : Ability to bridge the gap between corporate IT security, cloud architects, software developers, and field-level engineering constraints. * Certifications : Preferred credentials include CISSP, GICSP, GRID, CSSLP, CCSP, AWS Certified Security, or Microsoft Certified: Azure Security Engineer. * Proficiency : Capable of managing multiple tasks and meeting deadlines. Ability to work well independently or with a team. Education required * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience). ## Description As a Senior Threat and Vulnerability Management (TVM) Analyst, you will design, configure, and support the TVM Team in identifying, assessing, and remediating technical vulnerabilities across a global enterprise IT and OT infrastructure. You will be responsible for executing automated scans, prioritizing risks based on business impact, and collaborating with owners to track the timely patching of assets and applications. This role offers an advanced opportunity to exercise your expertise in risk analysis and security tooling within a complex, high-scale environment., * Scan All Assets : Run vulnerability scans across corporate networks, OT environments, web applications, APIs, and public/hybrid cloud infrastructure. * Audit Cloud Security : Continuous assessment of cloud workloads, identities, storage buckets, and configurations to detect security drift and misconfigurations. * Test Code & APIs : Perform Static (SAST) and Dynamic (DAST) application security testing, and audit API endpoints for data leakage and authentication flaws. * Filter Flaws : Eliminate false positives to isolate true risks threatening energy delivery systems, customer portals, and critical cloud infrastructure. * Assess Risk : Prioritize vulnerabilities using Threat Intelligence, CVSS scores, OWASP Top 10, OWASP API Security Top 10, and cloud-specific threat matrices. * Guide Remediation : Provide clear mitigation steps to IT engineers, substation OT technicians, software developers, and cloud infrastructure teams. * Ensure Compliance : Map vulnerability data directly to NERC CIP (including cloud-hosted BCSI requirements) and the NIST Cybersecurity Framework. * Report Risks : Draft executive risk reports, secure software metrics, and cloud compliance posture charts for leadership and federal regulatory auditors. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Web APIs you might not know about](https://www.wearedevelopers.com/videos/281-web-apis-you-might-not-know-about) - [Putting the Graph In GraphQL With The Neo4j GraphQL Library](https://www.wearedevelopers.com/videos/257-putting-the-graph-in-graphql-with-the-neo4j-graphql-library) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)