Cyber Security Engineer

Position: ICS/ OT Cyber Security Engineer III

Salary Range: Level III: $112,000- $128,000

Benefit: Robust benefits package that includes a 401K plan with %5 employer match, Annual Merit Increase, Annual COLA increase, Annual Short-Term Bonus, Annual Long-Term Bonus, Medical/Dental /Vision Insurance, Life and Disability Insurance, 20 days’ universal leave, 11 paid holidays

Location: Rockville, MD / Remote Optional

Hours: 8:00am-5:00pm Monday through Friday

Travel Expectations: potential 10% to plant sites or home office

Job Description:

Candidates for this role must either have a background in Industrial Control Systems and/or Operational Technologies supporting nuclear, heavy utilities or manufacturing.

This role is responsible for the development and execution of cyber security engineering strategies and activities in support of plant design and engineering teams. This role integrates the cyber security philosophy into the design of plant information and operational technology systems and is responsible for implementation and assessment of cyber security systems, supports the nuclear plant and recommends solutions to cyber security issues.

Job Minimum Qualifications:

• Typically, five years or more of progressive experience in cybersecurity, network security, or related experience for Level III.
• In-depth knowledge of OT cybersecurity architecture that supports various components of NIST cybersecurity framework capabilities, such as cybersecurity engineering, vulnerability management, identity management, threat intel, prediction and detection, as well as response and recovery.
• Knowledge or experience in software engineering, software development, or utilization of a software development toolset.
• Must have direct knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• GICSP, GCIH, GPEN, CISSP, or equivalent, or other specific training or experience in cyber security operations, design, and engineering.
• Familiarity with standard principles and practices of cybersecurity design for safeguarded plants and facilities.
• Networking/IT systems engineering background and experience.
• Knowledge of Federal requirements for Cyber security for Critical Infrastructure Protection (CIP).
• Knowledge of IEEE and IEC standards related to cyber security in embedded systems and control systems.
• Proficiency in developing and reviewing threat assessments and using results of those assessments to develop comprehensive cyber security designs.