Cyber Security Analyst II

Are you ready to be part of a company that's not just talking about the future, but actively shaping it? Join The AES Corporation (NYSE: AES), a Fortune 500 company that's leading the charge in the global energy revolution. With operations spanning 14 countries , AES is committed to shaping a future through innovation and collaboration. Our dedication to innovation has earned us recognition as one of the Top Ten Best Workplaces for Innovators by Fast Company in 2022. And with our certification as a Great Place to Work , you can be confident that you're joining a company that values its people just as much as its groundbreaking ideas.

AES is proudly ranked #1 globally in renewable energy sales to corporations, and with $12.7B in revenues in 2023 , we have the resources and expertise to make a significant impact as we provide electricity to 25 million customers worldwide. As the world moves towards a net-zero future, AES is committed to meeting the Paris Agreement's goals by 2050. Our innovative solutions, such as 24/7 carbon-free energy for data centers, are setting the pace for rapid, global decarbonization.

If you're ready to be part of a company that's not just adapting to change, but driving it, AES is the place for you. We're not just building a cleaner, more sustainable future - we're powering it. Apply now and energize your career with a true leader in the global energy transformation.

# Cyber Security Analyst II

Summary:

As a Cyber Security Analyst for Data Protection, you will play a key role in protecting AES enterprise data by working with a highly skilled team tasked with detecting, preventing, and responding to data loss and insider threats. This role requires hands-on technical proficiency in cybersecurity tools, scripting, and automation, combined with a strong understanding of data protection standards and compliance requirements. You will serve as a subject matter expert in data security technologies and help ensure technical enforcement of data protection strategies across the enterprise.

Responsibilities

- Support the technical implementation and management of data governance and protection tools to ensure compliance with internal and external standards.

- Collaborate in the design, implement, and refine data protection processes and controls, including DLP rulesets, insider risk indicators, and automated remediation workflows.

- Maintain detailed documentation of system configurations, protection measures, and automated detection rules to support auditing and continuous improvement.

- Support the development and delivery of end-user training sessions and documentation to promote awareness and correct use of cyber policies and security technologies.

- Perform hands-on monitoring and tuning of SIEM/SOAR platforms such as Google SecOps and Exabeam, including building correlation rules and dashboards.

- Collaborate with engineers and system owners to integrate Microsoft Purview, Microsoft Defender, and related Microsoft security tools into enterprise workflows.

- Use scripting languages (e.g., Python, PowerShell, MS Graph) to automate detection, reporting, and response mechanisms for security events.

- Support data classification implementation and tag propagation throughout enterprise data environments.

- Develop Power BI dashboards and visualizations to report key security metrics, incidents, and policy enforcement trends.

- Perform technical impact assessments and provide guidance on security architecture for new systems or business processes involving sensitive data.

- Review and validate access control implementations across systems to ensure proper segmentation and privilege enforcement.

- Analyze data activity and audit logs for anomalies or policy violations, coordinating with stakeholders for remediation.

- Use Jira to track and manage assigned tasks, incidents, and requests related to data protection activities, ensuring timely updates and accurate documentation throughout the workflow.

- Respond to incidents involving data loss or policy violations, using forensic techniques and investigation tools as needed.

Required Skills

- Minimum of 4 years of experience in cybersecurity with a focus on technical execution of data protection strategies.

- Proficiency in SIEM/SOAR tools, and integration of security telemetry from endpoints, proxies, and Microsoft cloud services.

- Experience with data classification, lifecycle management, and structured policy enforcement using Microsoft Purview.

- Working knowledge of regulatory standards and data privacy frameworks (e.g., GDPR, CCPA) and how they are applied through technical controls.

- Ability to automate security tasks using Python, PowerShell, and Microsoft Graph API.

- Experience with log analysis, alert tuning, and forensic investigations related to data access and movement.

- Experience designing and maintaining dashboards in Power BI to support visibility into security posture and incident trends.

- Comfortable managing technical documentation and delivering security training to end users.

- Experience using Jira to manage tasks and document processes in a collaborative team environment.

Desired Skills

- Certifications such as CISSP, CISM, CIPP/E, or CIPT that validate both technical and governance knowledge.

- Hands-on experience integrating DLP and insider risk controls across cloud and hybrid environments.

- Familiarity with NIST Cybersecurity Framework and ISO 27001 implementation from a technical perspective.

- Strong analytical and problem-solving abilities, with the ability to assess and respond to complex threats.

- Proven ability to work closely with IT, engineering, and compliance teams to operationalize data protection initiatives.

- Demonstrated ability to take initiative and drive tasks to completion with minimal supervision.

- Comfortable working independently and managing priorities in a dynamic, fast-paced environment.

- Proactive in identifying areas for improvement and offering solutions without waiting for direction.

- Fluency in Spanish (written and spoken).

AES is an Equal Opportunity Employer who is committed to building strength and delivering long-term sustainability through diversity and inclusion. Respecting all backgrounds, differences and perspectives enables us to improve the lives of our people, customers, suppliers, contractors, and the communities in which we live and work. All qualified applicants will receive consideration for employment without regard to sex, sexual orientation, gender, gender identity and/or expression, race, national origin, ethnicity, age, religion, marital status, physical or mental disability, pregnancy, childbirth, or related medical condition, military or veteran status, or any other characteristic protected under applicable law. E-Verify Notice: AES will provide the Social Security Administration (SSA) and if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.