Westinghouse Electric Company

This position will be filled as OT/IT Cyber Security Senior Engineer/Analyst.. In this position, the industrial Control Systems (ICS) Cyber Security Engineer / Analyst can expect to be responsible for assisting in the evaluation and implementation of network architecture and cyber security services and technologies in nuclear power plants around the world.. Contribute to project team efforts as the network architecture/cyber security engineer both in the office onsite and at nuclear power generation sites. Experience with common PLC, Scada, DCS platforms (i.e., Emerson Ovation). Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

senior engineer

Westinghouse Electric Company Westinghouse Electric Company is the world's leading supplier of safe, innovative nuclear technology and is shaping the future of carbon-free energy solutions. View company page Are you interested in being part of an innovative team that supports Westinghouse’s mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.
ICS Cyber Security Senior Engineer / Analyst
Job Responsibilities:
*This position will be filled as OT/IT Cyber Security Senior Engineer/Analyst. depending on experience & education*
In this position, the industrial Control Systems (ICS) Cyber Security Engineer / Analyst can expect to be responsible for assisting in the evaluation and implementation of network architecture and cyber security services and technologies in nuclear power plants around the world. The individual in this position will work as a member of the Distributed Control & Information System Platform & Cyber Security group and will be responsible for a variety of functions utilizing their understanding of cyber security practices and technologies. The candidate should have a thorough background and experience in information assurance/cyber security application to ICS, technical security audit, and general information technology & networking.
An ideal candidate for this position would be expected to provide technical advice and leadership in the realm of cyber security and have comprehensive knowledge of several areas of specialization within the cyber security discipline and industrial control systems architecture. Candidates in this position are directly responsible for providing technical leadership for engineering design, build, configuration, and testing of security systems and industrial control networks.
Contribute to project team efforts as the network architecture/cyber security engineer both in the office onsite and at nuclear power generation sites
Conduct moderately complex network architecture & cyber security analysis, product configuration, integration testing and troubleshoot difficult problems
Create asset lists including software and firmware details in support of Cyber security assessments
For multiple ongoing projects, provide network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk.
Author technical documentation including product configuration/implementation guides, requirements traceability, test plans, test procedures, test reports, and user administration guides
Participate in information sharing with internal and external customers including the delivery of presentation material, technical training, and knowledge transfer
Identify and assist in the development of new business opportunities including input to project proposals and associated technical descriptions when bidding on new projects
Interpret cyber security program policy and support procedure development
Perform system administration, network configuration, and virtual environment management (Windows Server and client system administration setup and support expertise)
Participate in control systems master planning efforts focused on Ovation control system security including application of host-based security products from a centralized server and secure (hardened) configuration of system components
Application of Network security including firewalls, data diodes, security information & event management, network intrusion detection
Travel up to 25%, typically when deploying systems to the field for installation and commissioning
Education:
Technical Bachelor’s Degree in Engineering (Electrical or Computer) or Computer Science, Information Sciences and Technology, Cyber Security / Information Assurance, or similar
Experience/Requirements:
Ability to be granted 10 CFR 73.56 Trustworthy and Reliable clearance.
Minimum of 4 (Prefer 8-10) years of professional experience (engineering, administration, and security of IT/OT)
Experience performing requirements management or security audit/assessments
Experience with common PLC, Scada, DCS platforms (i.e., Emerson Ovation)
Experience working in an industrial Operational Technology Environment
Knowledge of engineering principles and techniques
Knowledge in areas such as network design, Windows Domain setup expertise, security and group policy setup
Experience with security control frameworks such as NIST 800-53, 20 Critical Controls, ISO 27002, NEI 08-09
High level of experience in troubleshooting system integration issues, and working with cyber security, network, and virtualization technologies to implement comprehensive solutions
Experience in industrial environments or industrial control systems a plus
Certifications:
At least one of the following security certifications from a nationally recognized organization is preferred but not required.
GIAC Security Essentials Certification (GSEC) or equivalent
GIAC Systems and Network Auditor (GSNA), ISACA Certified Information Systems Auditor (CISA) or equivalent
Cisco Security Certification: (CCNP)
ISC2 Certified Information Systems Security Professional (CISSP)
Other related technical certifications showing areas of expertise from qualified and reputable vendors and certification agencies
Why Westinghouse?
Westinghouse Electric Company is the global nuclear energy industry’s first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system:
Safety and Quality
Integrity and Trust
Customer Focus and Innovation
Speed and Passion to Win
Teamwork and Accountability
Westinghouse offers competitive benefits to all our employees around the globe to keep them healthy and enhance their well-being. In the U.S. the following are representative of what we offer:
Comprehensive Health, Wellness and Income Protection Benefits
401(k) Savings Plan with Company Match
Paid Vacations and Holidays
Opportunities for Flexible Work Arrangements
Educational Reimbursement Program
Employee Referral Program
While our Global Headquarters are located in Cranberry Township, PA, we have over 9,000 employees working at locations in 19 different countries. You can learn more by visiting http://www.westinghousenuclear.com .
EOE of Minorities / Females / Vets / Disability.
Explore more InfoSec / Cybersecurity career opportunities Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below. #J-18808-Ljbffr

START NEW SEARCH