4013 Information Systems Security Engineer

OVERVIEW:

We are seeking a seasoned ICS/SCADA Security Engineer to join their team, providing expertise in cybersecurity considerations for industrial control systems (ICS) and supervisory control and data acquisition (SCADA) systems. This is an on-site position that requires oversight and support of Cyber/SSE activities for National Security Systems and critical infrastructure environments. Your proficiency, whether in electrical engineering, computer science, cybersecurity, or a related field, will enable you to assess and enhance the security posture of ICS/SCADA environments while considering operational constraints and mission-critical needs.

GENERAL DUTIES:

• ICS/SCADA system design, implementation, and security-understanding the architecture, protocols, and operational constraints of industrial automation systems.
• Familiarity with ICS/SCADA architectures, CONOPs, and operational environments in sectors such as energy, water, manufacturing, and critical national defense infrastructure.
• Apply systems engineering principles to the planning, design, development, deployment, integration, and testing of ICS/SCADA security solutions.
• Assess cybersecurity risks in ICS/SCADA environments and provide security engineering recommendations for securing operational technology (OT).
• Evaluate and analyze security implications of industrial control system acquisitions, including reviewing vendor proposals for compliance with cybersecurity best practices.
• Develop security strategies, best practices, and documentation related to ICS/SCADA cybersecurity, including RMF-compliant security architectures.
• Perform cybersecurity assessments and vulnerability analysis for ICS/SCADA systems, ensuring compliance with industry frameworks such as NIST 800-82, NERC CIP, and ISA/IEC 62443.
• Conduct security briefings and provide support to mission-critical teams, ensuring operational resiliency while maintaining compliance with RMF security controls.

REQUIRED QUALIFICATIONS:

• High School Diploma or GED plus 15 years of IT experience, or
• Bachelor's degree in a related discipline plus 10 years of IT experience,
• Master's degree in a related discipline plus 5 years of IT experience, or
• PhD in a related discipline plus 3 years of IT experience.
• CISSP (level 2) and/or CISSP-ISSEP/ISSAP (level 3) certification(s)

CLEARANCE:

• TS/SCI with CI Polygraph minimum