CyberSecurity Consultant

Job Summary
At NiSource, our Enterprise Security department excels in engineering sophisticated defenses, architecting resilient systems, and proactively defending the vital cyber infrastructure that is crucial to our business operations. Security Analysts, Security Consultants, Sr Cybersecurity Engineers, and Principal Cybersecurity Architects play a pivotal role in ensuring the security, reliability, and robustness of our information assets against a backdrop of evolving cyber threats.

These technical experts lead cybersecurity innovation, crafting and sustaining a secure cyber environment that not only protects but also empowers our business. They adeptly navigate the complexities of our digital and physical infrastructures, applying their deep technical expertise to develop and implement advanced security solutions. These solutions are not just defensive barriers; they are enablers of business continuity, operational efficiency, and customer trust.

Our team is committed to the strategic integration of cutting-edge security principles within our architectural frameworks and operational processes. By seamlessly weaving security into the fabric of our operations, they deliver value to our customers through enhanced protection and service reliability.

Each role within Enterprise Security contributes uniquely to this mission. Security Analysts are the frontline defenders, monitoring and responding to threats in real-time. Security Consultants provide the critical bridge between security theory and practice, offering insights that shape our security strategies. Sr Cybersecurity Engineers are the builders of our cyber defenses, innovating and implementing solutions that fortify our systems. Principal Cybersecurity Architects, ensure that our security infrastructure is not only robust today but also agile and adaptable for the challenges of tomorrow.

Together, these roles embody our commitment to cybersecurity as a cornerstone of our business strategy, ensuring that NiSource remains a trusted and secure provider of essential services to our customers.

Key disciplines for our cybersecurity roles include:
• Enterprise Cloud Security Engineering & Architecture: Ensuring the secure integration and operation of cloud-based infrastructure and services within the cybersecurity environment.
• Application Security: Providing technical expertise in the development and enhancement of secure applications, integrating security throughout the software development lifecycle.
• Network Security: Designing, developing, and implementing robust network operations and architecture, with a focus on advanced network security solutions and monitoring capabilities.
• Threat Intelligence & Analysis: Analyzing and interpreting threat data, employing frameworks such as NIST CSF, and enhancing security measures based on actionable intelligence.
• Incident Response & Forensic Analysis: Responding to and investigating cybersecurity incidents, performing forensic analysis, and ensuring rapid recovery and continuity of operations.
• Identity & Access Management: Managing access controls and identity systems, including the implementation of federated identity, MFA, SSO, and privileged access management.
• Penetration Testing & Ethical Hacking: Conducting controlled security assessments to identify vulnerabilities and strengthen the security posture against potential breaches.
• Regulatory & Compliance Knowledge: Ensuring all cybersecurity practices are in line with regulatory requirements and industry standards for compliance and governance.
• Artificial Intelligence & Machine Learning: Leveraging AI and ML to enhance cybersecurity initiatives, from threat detection to automated incident response.


Essential Functions

• Analyze security alerts and provide recommendations.
• Lead incident response activities and investigations.
• Assess risks associated with vulnerabilities.
• Consult on security architecture best practices.
• Evaluate IAM policies and procedures.
• Conduct in-depth compliance reviews and audits.
• Analyze and interpret threat data for strategic insights.
• Deliver security training sessions and awareness programs.
• Consult on cloud security best practices.
• Plan and conduct penetration tests.
• Contribute to the development of cybersecurity policies.
• Evaluate new technologies for potential adoption.
• 
  
  
   
• Required Qualifications For Position
• 4-6 years years of experience in security consulting and strategy enhancement.
• Proficiency in Cybersecurity principles, IT infrastructure, and Application Security. High
• Understanding of Network Security protocols, Cryptography, and secure network architectures. Medium
• Familiarity with Cloud