Columbus, Ohio, United States
Onsite
Job Posting End Date
06-11-2026Please note the job posting will close on the day before the posting end date.
Job Summary
Responsible for large-scale security assignments providing direction to other team members. Responsible for gathering, investigating, and analyzing very complex security requirements, processes, and incidents. Leads analysis of security controls assessments (internal and third party) through application security testing, penetration testing or other means to ensure controls effectiveness. Leads the identification and documentation of potential mitigations /remediations and ensures report creation of findings with identified risk response. Responsible for the conceptual design of implementation strategies on assigned security projects/activities. Leads advanced level implementation, support, and/or usage of technical solutions. Leads others in advanced problem solving, decision-making, and functional area knowledge. Mentors and provides functional/technical work direction to team.Job Description
What you’ll do:
Essential Job Functions & Tasks
Lead the Vulnerability Identification sub-team (Pillar 1 of AEP's four-pillar Cybersecurity Vulnerability Management program), responsible for identifying cybersecurity vulnerabilities across AEP's devices, products, and networks.
Architect, deploy, and administer a large-scale enterprise scanning infrastructure of 100+ Tenable scanners spanning Tenable.sc (on-premises head), Tenable Agents, and Tenable.vm cloud scanning.
Apply strong network engineering expertise to interpret AEP's network configuration, strategically place scanners across the enterprise for optimal coverage, and design firewall rule sets that allow scanner-to-Tenable.sc communication while honoring network segmentation boundaries.
Own the full lifecycle of scanning infrastructure, including scanner deployment, ongoing maintenance, capacity planning, hardware and software refresh, and patching of the Tenable platform itself.
Diagnose and resolve authenticated scanning issues, including credential failures, plugin behavior, service account permissions, and configuration gaps that prevent high-fidelity scan results.
Administer CyberArk integration for all scanner credentials, including the annual rotation of scan service accounts and ongoing governance of credential health across the scanning estate.
Configure and operate Dex.io / Mozenda web-scraping agents that gather external vendor and vulnerability information supporting the team's intelligence and identification workflows.
Build and maintain strong working relationships with AEP's Operational Technology (OT) partners to ensure scanning activities in generation, transmission, and distribution environments are supported, coordinated, and non-disruptive to operations.
Provide technical leadership and day-to-day coordination for one mid-level AEP analyst and approximately five Fortress Information Security contractors supporting routine identification processes and tasks.
Coach, mentor, and develop junior team members and contract personnel; establish processes, runbooks, and standards that allow analysts at varying skill levels to operate consistently and effectively.
Partner with GuidePoint professional services on deep Tenable platform troubleshooting and overall health of the Tenable environment.
Hand off identified vulnerabilities to the Vulnerability Analysis sub-team (Pillar 2) with sufficient context, asset detail, and scan integrity to support downstream triage and prioritization.
Maintain awareness of NERC CIP regulatory requirements and ensure scanning activities in CIP-regulated environments comply with applicable standards.
Participate in a shared on-call rotation across the broader Vulnerability Management team (approximately 11 personnel).
Advise the Vulnerability Management Manager on tool effectiveness, infrastructure investment, scanner architecture decisions, and process improvements.
Communicate complex technical issues clearly to peers, business partners, contractors, and leadership at all levels of the organization.
Pass and maintain the background check required for access to NERC CIP-regulated assets and information.
Additional Job Duties:
Vulnerability Identification Lead
Vulnerability Scanning Lead
Tenable Platform Lead
Cyber Vulnerability Engineer Lead
Security Operations Engineer
Cybersecurity Specialist Lead
What We're Looking For:
Education requirements are listed below:
Bachelor's degree OR Associates degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).
Work Experience requirement listed below:
7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.
What You'll Get:
Base Salary from $116,255.00 - $151,132.50 /year. In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.
At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!
Compensation Data
Compensation Grade:
SP20-009Compensation Range:
$116,255.00 - $151,132.50The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.
It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.Want to know if this job is worth applying to?