Intelligence Analyst Lead

JOB SUMMARY

Provides analysis using knowledge of security concepts, principles and practices applicable to security administration. Uses technology systems and applications, including commercially available databases and social media platforms, to monitor security threats and operational risks to business continuity. Analyzes multiple sources for timely, accurate, and relevant information with potential impacts to facilities, employees, and assets. Prepares detailed threat assessments and travel advisories in support of employee and executive travel.  Reviews pre-hire background and screening information and provide security risk assessment information in accordance with company policy and legal requirements. Recommends actions and changes that will protect the organizations people, assets and ensures security processes, procedures and systems are in compliance.

JOB DUTIES

• As a highly skilled specialist, functions as a subject matter expert and contributes to the development of new processes and techniques. Completes complex tasks in creative and effective ways.

• Consistently works on advanced, complex assignments requiring comprehensive knowledge of the area of specialization. Requires a high degree of initiative to resolve issues.

• Regularly exercises discretion in area of expertise. Acts independently to determine methods and procedures on new assignments.

• Typically leads or provides guidance to lower-level colleagues.

• Responds to, and reports on security threats, providing initial assessment of impact severity and types of incidents being addressed.

• Performs periodic application security assessments of simple-to-moderate complexity and review for evidence of vulnerability or compromise and assisting with the implementation of resolution.

• Escalate developing risks with impact to security leadership.

• Use notification systems to draft and disseminate actionable information to company employees during increased threat, emergency or crisis situations.

• Provide security assistance and risk analysis for special events, operational activities, and employee travel worldwide.

• Maintain a high level of situational awareness by tracking geopolitical developments, emerging threats, and technological trends that could impact the security landscape.

• Ensure all Standard Operating Procedure (SOP) protocols and procedures are followed according to company policies.

• Assess threats in real-time and ensure effective coordination, communication, and decision-making during heightened security situations.

• Assist company personnel with proactive intelligence, safety and security concerns impacting facilities, people, and travel.

• Respond professionally to security-related inquiries, safety concerns, and emergency situations in accordance with company policies.

• Perform additional duties as assigned to support the overall security mission.

• Works with other departments to implement security solutions

• Performs systems and application administration on departmental assets

ADDITIONAL JOB DUTIES

• Demonstrates proficiency and knowledge in an administrative or technical area. Applies acquired job skills and ERCOT policies and procedures to complete assigned tasks and expand skills.

• Works on assignments that are usually within an area of expertise that are semi-routine in nature. Applies knowledge and understanding to resolve most problems and issues but recognizes the need for occasional deviation from accepted practice.

• Normally follows established procedures on routine work and requires instructions on new and/or complex assignments.

• May provide informal guidance to lower-level colleagues.

EDUCATION

• Bachelor's Degree Criminal Justice, Public Safety or security related field.

• or a combination of education and experience that provides equivalent knowledge to a major in such fields is required.

REQUIRED EXPERIENCE

• 8+ years of job-related work experience in excess of degree requirements.

• Proven progressively responsible experience in intelligence, GSOC operations, physical security, military or public safety

• Expert-level proficiency with Security Information and Event Management (SIEM) platforms, including advanced query development, correlation rule creation, and log source integration.

• Deep hands-on experience with Data Loss Prevention (DLP) platforms, including policy development, tuning, and incident investigation workflows.

• Proven expertise with insider threat analytics platforms and endpoint detection tools, including behavioral analytics, telemetry analysis, and alert triage methodologies.

PREFERRED EXPERIENCE

• Familiarity with building detection logic around data handling behaviors, access patterns, and productivity telemetry in enterprise environments.

• Experience with continuous evaluation frameworks, personnel vetting processes, or security programs requiring holistic analysis of human and technical indicators

• Background in security operations roles focused on workforce behavioral analytics, digital risk detection, or enterprise monitoring programs.

The foregoing description reflects the minimum qualifications and the essential functions of the position that must be performed proficiently with or without reasonable accommodation for individuals with disabilities.  It is not an exhaustive list of the duties expected to be performed, and management may, at its discretion, revise or require that other or different tasks be performed as assigned.  This job description is not intended to create a contract of employment with ERCOT.  Both ERCOT and the employee may exercise their employment-at-will rights at any time.

ERCOT is firmly committed to equal employment for all qualified persons without regard to race, sex, medical condition, religion, age, creed, national origin, citizenship status, marital status, sexual orientation, physical or mental disability, ancestry, veteran status, genetic information or any other protected category under federal, state or local law.

Expected Salary Range: