Job Posting End Date
06-08-2026
Please note the job posting will close on the day before the posting end date.
Responsible for low level security assignments with direction from senior team members. Establish basic understanding of Security operations and processes, which may include research and investigation of security events or project related activities. Assesses security controls through security testing or other means to ensure effectiveness. Create documentation and work activities in a clear, comprehensive manner, always maintaining high quality work. Demonstrates problem solving, research, and functional area knowledge.
What you’ll do:
Essential Job Functions & Tasks
Operate as a junior analyst on the Vulnerability Management Dispositioning sub-team (Pillar 3), responsible for moving analyzed vulnerabilities through to a documented remediation decision in partnership with AEP business units.
Receive analyzed vulnerabilities from the Vulnerability Analysis sub-team and partner with the affected business unit to build remediation action plans, including patch, mitigate, configuration change, or formal exception paths.
Run the day-to-day vulnerability exception process, including intake of business unit submissions, validation of supporting information, risk ranking inputs, and routing of exceptions through the appropriate Director, VP, and SVP approval chain.
Capture and enter business unit responses, action plans, and exception decisions into the on-premises Fortress vulnerability management platform with accuracy and consistency.
Coordinate with Fortress Information Security contractors who provide staff augmentation for routine dispositioning processes, leveraging their capacity while maintaining AEP-side ownership of decisions and quality.
Build and maintain strong, collaborative working relationships with assigned business unit partners across IT, Operational Technology, and corporate functions; serve as a constructive, helpful point of contact rather than an adversarial enforcer.
Engage AEP's Operational Technology partners (generation, transmission, distribution) with the same respect and partnership posture, recognizing the operational realities that influence remediation timing and approach.
Produce junior-grade exception reports, approval packets, and status summaries for directors, VPs, and SVP-level audiences using established team templates and tooling.
Perform a warm, structured handoff of dispositioned items to the Vulnerability Tracking sub-team (Pillar 4), ensuring approved exceptions, action plans, and remediation commitments transfer cleanly and with full context.
Maintain clear, current documentation of exception status, business unit commitments, and outstanding action items so leadership has accurate visibility at any point in the process.
Communicate effectively in writing and verbally with peers, business unit contacts, contractors, and leadership; ask clarifying questions and escalate appropriately when blocked.
Demonstrate strong soft skills, including active listening, professionalism, attention to detail, time management, and the ability to navigate competing priorities across multiple business units.
Maintain awareness of NERC CIP regulatory requirements as dispositioning activities interact with CIP-regulated assets and information.
Participate in a shared on-call rotation across the broader Vulnerability Management team.
Pass and maintain the background check required for access to NERC CIP-regulated assets and information.
Additional Job Duties:
Vulnerability Management Analyst
Cybersecurity Exception Analyst
Cybersecurity Risk Analyst
Vulnerability Dispositioning Analyst
Junior Cybersecurity Analyst
Cybersecurity Operations Analyst
What We're Looking For:
Education requirements are listed below:
Bachelor's degree OR Associates degree with one year relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 2 years relevant experience in IT system administration/help desk/security (cyber or physical); OR graduation from an approved Cybersecurity Program; alternatively may have non-degree qualifications (such as hands-on demonstrated ability in a technical interview/assessment).
Work Experience requirement listed below:
No additional experience required in addition to experience identified above.
What You'll Get:
Base Salary from $74,551.00 - $93,188.50year.In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.
At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!
Compensation Data
Compensation Grade:
SP20-006
Compensation Range:
$74,551.00 - $93,188.50
The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.
It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.
Our team at American Electric Power is committed to improving our customers' lives with reliable, affordable power. We are investing $54 billion from 2025 through 2029 to enhance service for customers and support the growing energy needs of our communities. Our nearly 16,000 employees operate and maintain the nation's largest electric transmission system with 40,000 line miles, along with more than 225,000 miles of distribution lines to deliver energy to 5.6 million customers in 11 states. AEP also is one of the nation's largest electricity producers with approximately 29,000 megawatts of diverse generating capacity. We are focused on safety and operational excellence, creating value for our stakeholders and bringing opportunity to our service territory through economic development and community engagement. Our family of companies includes AEP Ohio, AEP Texas, Appalachian Power (in Virginia and West Virginia), AEP Appalachian Power (in Tennessee), Indiana Michigan Power, Kentucky Power, Public Service Company of Oklahoma, and Southwestern Electric Power Company (in Arkansas, Louisiana, east Texas and the Texas Panhandle). AEP also owns AEP Energy, which provides innovative competitive energy solutions nationwide. AEP is headquartered in Columbus, Ohio. For more information, visit aep.com.
