Cloud and Endpoint Security Engineer at Nisource in Columbus, OH | USD110,200-165,300 | Kablio

Role

Description

siem integration

cloud security

automation scripts

playbook development

policy tuning

vulnerability management

Integrate endpoint and cloud telemetry into SIEM (Splunk) and SOAR platforms for automation, enrichment, and real-time containment
Collaborate with infrastructure, architecture, and compliance teams to align controls with Zero Trust and regulatory frameworks (e.g., NERC, FERC, CIP)
Participate in post-incident analysis and continuous improvement cycles to strengthen overall security posture
Evaluate and pilot emerging security technologies, such as Falcon Discover, Identity Protection, or Cloud Workload Protection, to enhance defensive depth
Develop and enhance custom detections, response logic, and playbooks leveraging Falcon Fusion, RTR, and threat intelligence data.
Lead efforts to secure endpoint and cloud baselines aligned with CIS, NIST, and NiSource technical specifications
Partner with the SOC and Incident Response teams to investigate alerts, correlate cloud and endpoint events, and validate detection efficacy
Drive automation of security processes and metrics reporting using Python, PowerShell, and API-based integrations
Deploy, configure, and manage cloud security controls and integrations across Azure, AWS, and GCP—ensuring consistent protection across hybrid workloads
Engineer, administer, and optimize the CrowdStrike Falcon platform—covering policy tuning, sensor deployment, and health monitoring across enterprise endpoints
Support vulnerability and patch management integrations using Falcon Spotlight and cloud-native tools

Requirements

crowdstrike

splunk

servicenow

powershell

ccfa

mitre att&ck

3+ years of direct hands-on experience with CrowdStrike Falcon or a comparable EDR/XDR platform
E-Verify Poster (English and Spanish) E-Verify Participation Poster English and Spanish
Experience contributing to incident response and forensics investigations leveraging EDR telemetry
Right to Work Poster (English and Spanish) If you have the right to work, don't let anyone take it away
Familiarity with Splunk, ServiceNow, and SOAR integrations
Familiarity with cloud workload and posture management tools (e.g., Prisma Cloud, Defender for Cloud)
3+ years of threat detection engineering, endpoint telemetry, and incident response processes
Experience with energy sector regulatory frameworks (NERC, FERC, CIP)
Exposure to outsourced IT or managed service environments
Proficiency in scripting and automation using PowerShell, Python, or API integrations
Industry certifications such as CCFA, CCFR, CCSP, GIAC, CompTIA, Azure Certifications, or ISC2
Understanding of NIST CSF 2.0, MITRE ATT&CK, and Zero Trust architectures
5+ years of experience in cybersecurity engineering, endpoint protection, or SOC environments

Benefits

The salary offered to a candidate is based on several factors including but not limited to the candidate’s skills, job-related knowledge, and relevant experience, as well as internal pay equity.

Training + Development

Information not given or found

Interview process

Information not given or found

Visa Sponsorship

authorized to work in the united states without requiring sponsorship.

Security clearance

Information not given or found

Company

Overview

Founded 1912

Year of establishment

The company was established in 1912 and has since grown into a major player in the energy sector.

Millions of Customers

Customer base size

The company serves millions of households, businesses, and industries across the U.S.

Provides reliable service by managing infrastructure for natural gas and electricity.
Specializes in energy delivery, including transmission and distribution.
Regularly modernizes systems to enhance safety, efficiency, and sustainability.
Deeply rooted in innovation, integrating renewable energy into the grid.
Involved in large-scale infrastructure projects to enhance energy security.
Known for steady financial performance and a forward-thinking approach.

Culture + Values

Be Safe
Look for a Better Way
Act with Care
Take Accountability
Serve our customers and our communities
Be respectful and inclusive
Work together
Deliver on our commitments
Be transparent
Do the right thing

Environment + Sustainability

Net Zero

GHG Emissions Target

Aim to achieve net zero Scope 1 and Scope 2 greenhouse gas emissions by 2040.

58% Reduction

Scope 1 Emissions Since 2005

Significant decrease in Scope 1 greenhouse gas emissions since 2005.

50% Methane Reduction

From Mains and Services

Targeting a 50% reduction in methane emissions from mains and services by 2025.

$3B Investment

Renewable Energy Transition

Anticipated investments in renewable energy generation transition through 2028.

Retire 100% of remaining coal-fired electric generating units by 2026–2028.
Exploring hydrogen blending in gas systems via an on‑site hydrogen blending skid.
Named to Dow Jones Sustainability Index for nine consecutive years and to North America Index eleven consecutive years.
Plans to conserve lands: restoring hundreds of acres through vegetation management, soil remediation and seeding.

Inclusion & Diversity

Employee Promotion Rates

Promotion Statistics (8/31/23)

Reflects the promotion rates across various demographic groups within the organization.

Executive Representation

Leadership Demographics (12/31/24)

Breakdown of executive leadership roles by gender in the organization.

Employee Population

Workforce Demographics (12/31/24)

Overall gender distribution within the organization's workforce.

Provide energizing and inclusive culture where every employee has a voice and active seat at the table
Support diverse and unique customers and invest in communities
Diversify workforce partnerships through conferences (e.g., SWE, SASE, SHPE, NSBE, NBMBA)
Commit to supplier diversity and economic inclusion initiatives

Articles

Careers at NiSource

NiSource Newsroom

NiSource Investor Relations

Role

Description

siem integration

cloud security

automation scripts

playbook development

policy tuning

vulnerability management

Integrate endpoint and cloud telemetry into SIEM (Splunk) and SOAR platforms for automation, enrichment, and real-time containment
Collaborate with infrastructure, architecture, and compliance teams to align controls with Zero Trust and regulatory frameworks (e.g., NERC, FERC, CIP)
Participate in post-incident analysis and continuous improvement cycles to strengthen overall security posture
Evaluate and pilot emerging security technologies, such as Falcon Discover, Identity Protection, or Cloud Workload Protection, to enhance defensive depth
Develop and enhance custom detections, response logic, and playbooks leveraging Falcon Fusion, RTR, and threat intelligence data.
Lead efforts to secure endpoint and cloud baselines aligned with CIS, NIST, and NiSource technical specifications
Partner with the SOC and Incident Response teams to investigate alerts, correlate cloud and endpoint events, and validate detection efficacy
Drive automation of security processes and metrics reporting using Python, PowerShell, and API-based integrations
Deploy, configure, and manage cloud security controls and integrations across Azure, AWS, and GCP—ensuring consistent protection across hybrid workloads
Engineer, administer, and optimize the CrowdStrike Falcon platform—covering policy tuning, sensor deployment, and health monitoring across enterprise endpoints
Support vulnerability and patch management integrations using Falcon Spotlight and cloud-native tools

Requirements

crowdstrike

splunk

servicenow

powershell

ccfa

mitre att&ck

3+ years of direct hands-on experience with CrowdStrike Falcon or a comparable EDR/XDR platform
E-Verify Poster (English and Spanish) E-Verify Participation Poster English and Spanish
Experience contributing to incident response and forensics investigations leveraging EDR telemetry
Right to Work Poster (English and Spanish) If you have the right to work, don't let anyone take it away
Familiarity with Splunk, ServiceNow, and SOAR integrations
Familiarity with cloud workload and posture management tools (e.g., Prisma Cloud, Defender for Cloud)
3+ years of threat detection engineering, endpoint telemetry, and incident response processes
Experience with energy sector regulatory frameworks (NERC, FERC, CIP)
Exposure to outsourced IT or managed service environments
Proficiency in scripting and automation using PowerShell, Python, or API integrations
Industry certifications such as CCFA, CCFR, CCSP, GIAC, CompTIA, Azure Certifications, or ISC2
Understanding of NIST CSF 2.0, MITRE ATT&CK, and Zero Trust architectures
5+ years of experience in cybersecurity engineering, endpoint protection, or SOC environments

Benefits

The salary offered to a candidate is based on several factors including but not limited to the candidate’s skills, job-related knowledge, and relevant experience, as well as internal pay equity.

Training + Development

Information not given or found

Interview process

Information not given or found

Visa Sponsorship

authorized to work in the united states without requiring sponsorship.

Security clearance

Information not given or found

Company

Overview

Founded 1912

Year of establishment

The company was established in 1912 and has since grown into a major player in the energy sector.

Millions of Customers

Customer base size

The company serves millions of households, businesses, and industries across the U.S.

Provides reliable service by managing infrastructure for natural gas and electricity.
Specializes in energy delivery, including transmission and distribution.
Regularly modernizes systems to enhance safety, efficiency, and sustainability.
Deeply rooted in innovation, integrating renewable energy into the grid.
Involved in large-scale infrastructure projects to enhance energy security.
Known for steady financial performance and a forward-thinking approach.

Culture + Values

Be Safe
Look for a Better Way
Act with Care
Take Accountability
Serve our customers and our communities
Be respectful and inclusive
Work together
Deliver on our commitments
Be transparent
Do the right thing

Environment + Sustainability

Net Zero

GHG Emissions Target

Aim to achieve net zero Scope 1 and Scope 2 greenhouse gas emissions by 2040.

58% Reduction

Scope 1 Emissions Since 2005

Significant decrease in Scope 1 greenhouse gas emissions since 2005.

50% Methane Reduction

From Mains and Services

Targeting a 50% reduction in methane emissions from mains and services by 2025.

$3B Investment

Renewable Energy Transition

Anticipated investments in renewable energy generation transition through 2028.

Retire 100% of remaining coal-fired electric generating units by 2026–2028.
Exploring hydrogen blending in gas systems via an on‑site hydrogen blending skid.
Named to Dow Jones Sustainability Index for nine consecutive years and to North America Index eleven consecutive years.
Plans to conserve lands: restoring hundreds of acres through vegetation management, soil remediation and seeding.

Inclusion & Diversity

Employee Promotion Rates

Promotion Statistics (8/31/23)

Reflects the promotion rates across various demographic groups within the organization.

Executive Representation

Leadership Demographics (12/31/24)

Breakdown of executive leadership roles by gender in the organization.

Employee Population

Workforce Demographics (12/31/24)

Overall gender distribution within the organization's workforce.

Provide energizing and inclusive culture where every employee has a voice and active seat at the table
Support diverse and unique customers and invest in communities
Diversify workforce partnerships through conferences (e.g., SWE, SASE, SHPE, NSBE, NBMBA)
Commit to supplier diversity and economic inclusion initiatives

Articles

Careers at NiSource

NiSource Newsroom

NiSource Investor Relations