Job Description

POSITION SUMMARY :

• Support projects by addressing Facility Related Control System (FRCS) and Industrial Control System Cybersecurity, utilizing Information Technology (IT) information and techniques. Technical focus, working with networking, systems, design, and development teams advising them on security topics and helping review and confirm implementations.
• Support the execution of projects consisting of network design and re-design, cybersecurity vulnerability assessments, secure system design and integration, and/or development of cybersecurity programs for clients in a wide variety of industries utilizing the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF), NIST Cybersecurity Framework (CSF), DoD 8500.01, UFC 4-010-06, and other industry specific compliance frameworks and regulations.

PRIMARY RESPONSIBILITIES :

• Review, develop materials, and recommend technical, administrative, and physical controls to mitigate identified cybersecurity risk.
• Participate in project meetings with the client to identify existing cybersecurity controls and what controls/processes need to be included in the design.
• Prepare design documents with provisions for proper cybersecurity compliance with applicable standards.
• Perform risk assessments of IT infrastructure and applications and make recommendations for improvements.
• Review system architecture for compliance with security frameworks, best practices and/or regulatory requirements.
• Review and recommend firewall configurations to secure internet facing systems.
• Review and analyze security alerts and vulnerability notices from vendors and other security sources.
• Ability to travel nationally or internationally. Some travel is expected for this position.

QUALIFICATIONS :

• Bachelor's Degree or equivalent work experience in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Information Systems Security or equivalent.
• CISSP certification or equivalent required.
• US citizenship required.
• Familiar with NIST SP 800 series and CSF security frameworks desired.
• Familiar with information security systems such as firewalls, IDS/IPS, SIEM, vulnerability management, antivirus, access control, authentication, patching, and logging.
• Demonstrates knowledge of applicable cybersecurity standards involving control systems, including those relating to process networks.
• Background in design of cybersecurity systems required. Military FRCS cybersecurity background preferred. Power distribution (NIST) knowledge preferred.

COMPETENCIES :

Direction

• Demonstrates willingness to take on responsibilities and challenges; fulfills obligations reliably and dependably.
• Determines how a system should work and how changes in the conditions and operations will affect outcomes.
• Identifies indicators of system performance and actions needed to improve performance relative to the goals.

• Attention to Detail - Thorough when performing work and conscientious about details.

Collaboration

• Listens actively to understand what people say, asks questions, and speaks to convey information effectively.
• Effective Communication - Expresses information to individuals or groups effectively, considering the audience and nature of the information (for example, technical or sensitive).
• Coordinates work with others, adjusting actions in relation to others' actions; reconciles differences when needed.
• Works with clients to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services.

Innovation

• Identifies complex problems and reviews related information to develop options and implement solutions.
• Uses logic and reasoning to identify strengths and weaknesses of alternative solutions or approaches to problems.
• Considers the relative costs and benefits of potential actions to choose the most appropriate ones.

Development

• Understands the implications of latest information for current and future problem-solving and decision-making.
• Teaches others about information security and provides resources to facilitate learning and security.

Expertise

• Basic understanding of cybersecurity principles and general knowledge of cybersecurity technologies, as well as industry recognized certifications.
• General knowledge of cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.

• General knowledge of the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls.
• Maintain a basic knowledge of current and emerging state-of-the-art computer and network systems technologies, architectures, and products.

• Demonstrates knowledge of control systems utilized by utilities, manufacturing, transportation, smart cities.
• Demonstrates knowledge of computers, technology, telecommunications, and communications.
• Review Control Correlation Identifiers and implement corrective measures to assure cybersecurity of control systems.

KEY PERFORMANCE INDICATORS

• Successful project implementation of cyber security systems and protocol design and review.
• Collaboration, communication, and relationship-building are key to the success of this role.

PHYSICAL DEMANDS :

• Typical physical demands associated with working in an office environment.

Are you ready to take your career to the next level with a company that is committed to innovative growth and improving lives in the communities where we live and work? Stanley Consultants is an award winning, interdisciplinary consulting firm providing program management, planning, design, permitting, engineering, and environmental services. Recognized for its commitment to client service and a passion to make a difference, Stanley Consultants brings global knowledge, experience, and capabilities to serve federal, municipal, and industrial clients. Stanley Consultants solves complex challenges in power generation and delivery, transportation, water, energy, and industrial plants, building services, and the environment. Since 1913, Stanley Consultants has successfully completed more than 50,000 projects globally in more than 100 countries, including all 50 of the United States and its territories.

Throughout our history, Stanley Consultants has remained an employee-owned company, committed to a legacy of professional independence and objectivity. The commitment to private ownership, shared responsibility and reward has sustained us for more than 100 years.

A Great Place to Work: Become a Member

Once you are hired at Stanley Consultants, you become a member of our member-owned company. Our Core Values speak to the capabilities, initiative, integrity, creativity, and commitment that make you, as a member, our most important asset. As a member, you have the opportunity to chart your own career path and play a role in shaping our mutual future.

Click Here: A Great Place to Work

#LI-JM1

#LI-Remote

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

Job Tags

Similar Jobs