Security Intern (2547)

Job description

At ENGIE North America, innovation and excellence create a platform for growth. We have a range of businesses in the United States and Canada, including clean power generation, cogeneration, and energy storage; retail energy sales; and comprehensive services to help customers run their facilities more efficiently and optimize energy and other resource use and expense. Nearly 100 percent of our power generation portfolio is low carbon or renewable. Globally, ENGIE is the largest independent power producer and energy efficiency services provider in the world, with operations in 70 countries employing 150,000 people, including 1,000 researchers in 11 R&D centers.

 

We are looking for talented and motivated individuals to create the future of energy and customer solutions. Join a rewarding and flexible work environment that encourages innovation and creativity to help customers meet their energy challenges today and in the future.

Title of Internship: Security Intern

Purpose
Interns for the ENGIE IT Security Team will contribute to the overall confidentiality integrity and availability of our IT resources; both locally and globally. The internship requires a self-motivated individual with an appetite to learn and a strong desire to pursue a career in Information Technology. This opportunity will assist in further developing professional skills, specifically, in the field of Cyber Security. It will provide a bird’s eye view of a comprehensive IT Security Program as well as in depth knowledge and training on next generation security tools.

Reports to
IT Security Manager 

Location/Department
Houston, TX / IT

Status
Hourly – Non-Exempt

Essential Job Functions
·  Provides assistance with the evaluation and testing the security of systems to ensure that the systems and data integrity of the organization is being maintained and protects against the latest cyber threats.
·  As part of the IT Security incident response team, assist with incident investigations to determine and document root cause and the impact of detected computer security incidents.
·  Maintain awareness of new and emerging cyber-attack threats with potential to harm company systems and networks.
·  Help implement countermeasures to mitigate potential security threats.
·  Assist in the identification of vulnerabilities that are applicable to systems and applications, determine their severity and urgency, work with the system owners to determine if and when corrective action will be taken, and perform necessary actions to verify that corrective actions were effective.
·  Support security assessments/reviews/audits of systems including applications, servers, firewalls, remote access logs, web and email filters.
·  Support the review of existing applications periodically as well as new applications prior to installation to ensure that the applications adhere to security policies.
·  Perform risk analysis assessment of applications, networks and systems.
·  Provide assistance with system compliance monitoring / reporting.
·  Assist with network vulnerability/penetration testing and information security forensics investigations.
·  Review and analyze security and privacy exceptions. Work with business partners to resolve security and privacy exceptions.
·  Carries out other duties as assigned

Requirements

·  Must be legally authorized to work in the United States, and should not require, now or in the future sponsorship for employment visa status
·  Must have completed at least one course in IT Security
·  Must have excellent oral and written communication skills
·  Must have the ability to think analytically, present ideas professionally, and work in project teams
·  Direct experience in information security field preferred
·  Python scripting experience
Splunk application development experience
·  Cyber incident response experience
·  Familiarity with: Firewall technologies; Linux and Windows operating systems, Knowledge of Network security understanding in a multi-protocol LAN/WAN environment including TCP/IP, IPSEC, SSL and HTTP; Host and network intrusion detection and monitoring systems and methodologies, Identity Management solutions
·  Demonstrated initiative to learn new technologies
·  Ability to present and discuss technical information to users with varying technical expertise
·  Ability to work effectively in emergencies while handling multiple priorities
·  Professional and/or technical certification in Information Security is desirable (i.e., CISSP, CISM, CISA, Security+, ISO, SANS certifications)
·  For this position, you must have evidence of right to work in the U.S. There is no employer sponsorship of U.S. residency or work authorization with this role.

Essential Physical Abilities

·  Ability to meet highest attendance requirements
·  Ability to communicate effectively, both written and verbally.
·  Ability to handle multiple assignments on a timely basis with a high degree of accuracy.
·  Ability to use personal computer, calculator, etc.
·  Could involve some lifting.

Education/Experience

·  Must be at least a or senior (by end of spring 2020 semester) working toward a Bachelor’s degree in Engineering, Computer Science, Information Security, or closely-related degree, or Master’s/MBA student working towards a master’s in Engineering, Computer Science, Information Security, or closely-related degree
·  Must possess a 3.0 GPA or higher & be able to work up to 40 hours per week

Working Environment
Work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee is not exposed to weather conditions. The noise level in the work environment is usually moderate.

 

For this role you must have authorization to work in the United States. Qualified applicants are considered for employment, and employees are treated during employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, veteran status, gender identity, or expression, genetic information or any other legally protected status.

 

This job advertisement is supported by the ENGIE Talent Acquisition team. Agency involvement is not required. All related inquires must be done to the Talent Acquisition team, not direct to ENGIE North America Managers.

 

Additional Information
·  Posting Date: Dec 12, 2019