Job Description

What you’ll do:

Ensure compliance with the National Industrial Security Program, Cognizant Security Agency (CSA) requirements, and corporate security policies, procedures and directives.
Advance knowledge and experience in cybersecurity frameworks such as NIST, ISA/IEC 62443, NERC, CSF, CIS, and MITRE Att&CK.
Extensive experience in analyzing system application, security, network logging data from a SIEM to create actionable work tasks for a SOC, IT security analysts, or other IT staff.
Ensure Junior team members are delivering quality deliverables such as weekly status reports and security controls mitigation.
Experience performing threat modeling and security review to assess new designs and security requirements for new technologies.
Experience with Windows Servers, Linux/UNIX, enterprise anti-virus, endpoint security, application whitelisting technologies, SIEM, logging configurations, IDS/IPS, authentication methods, TCP/IP, packet capture and analysis.
Provide security awareness, travel, and other briefings through public speaking, written formats.
Experience in evaluation of industrial cybersecurity standards and frameworks and selection of the best-fit management and controls frameworks for ENGIE organization and culture.
Develop Key insights and metrics from Site Data to build meaningful reports
Experience in an industrial controls environment (power plants/energy, manufacturing, utility, or equivalent) with working knowledge of SCADA/DCS systems and related hardware and software.
Collaborate with the Application, Infrastructure and Network Teams to implement security controls in the Industrial control’s environments with the ability to communicate in a simplistic manner.
Working closely with Senior Management and System Owners and other Stakeholders to advise and address cybersecurity concerns.
Strong verbal and written communication skills across technical and non-technical audiences, solid team player, with demonstrated abilities in analysis and problem-solving.
Possess knowledge of cyber security fundamentals.
Development of program policies, procedures, standards, guidelines, and Incident Response plans.
Deep understanding of network attacks, DDoS, Phishing, email protocols/security/spam, encryption, authentication, logging and log analysis, IP and device reputation, and security rules and policies.
Experience working with multiple stakeholders such as engineering/operations teams, internal business units, external incident response teams, and law enforcement throughout the incident lifecycle.
Development of security awareness training and security skills training content.
Sr. level cyber security incident response experience and skills.
Provides status reports that summarizes activities completed, key engagement statistics, issues requiring attention, and plans / action items for the next reporting period.

What you bring:

Bachelor’s degree in Computer Science or a related technical degree
Develop Key insights and metrics from Site Data to build meaningful reports
Experience in an industrial controls environment (power plants/energy, manufacturing, utility, or equivalent) with working knowledge of SCADA/DCS systems and related hardware and software.
Experience working remotely across large enterprises.
Possess knowledge of cyber security fundamentals.
The ideal candidate will have the ability to think critically, work in group settings and be proactive in pursuing research and problem-solving with minimal supervision.
Experience with cyber security standards and practices in multiple industries (e.g., ISA99/IEC 62443, NERC, etc.), and industry certifications such as CISSP or ISACA are a plus.
Experience with Access Management models in multiple standalone configurations or in wide scoped heterogeneous information systems.
Knowledge of design, implementation, or life cycle support of process automation and control systems is a plus.
Knowledge of Industrial Control Systems challenges in multiple industries from Energy to manufacturing and more is a plus.