The Industrial Control Systems/ Operational Technology (ICS/OT) Cybersecurity Engineer will be responsible for configuration management, Change Control Board, patching, updates, and testing of new devices and applications. To be successful in this role, the ICS Cybersecurity Advisor must have experience with ICS/OT security and potential hacks. Another part of this job is integration and technology testing to assure proper process and procedures exist for both the integrity and security of our systems. The successful applicant will also work closely with internal test groups to ensure that validation of security functionality is comprehensive and correct. In addition, the successful candidate will also assist in performing cybersecurity assessments of control systems and surrounding IT infrastructure and work closely with a team of peers to provide IT and OT Cybersecurity configuration recommendations.
This is a CONTRACT POSITION.
Your employment will be held by a third-party company of ENGIE’s choosing. Any offered contract role will not constitute an offer for nor guarantee of future employment with ENGIE.
Duration:
- 6 months
Compensation:
- $65.00/hr (Depending on Experience)
Location:
- Houston
What you’ll do:
- Ensure compliance with the National Industrial Security Program, Cognizant Security Agency (CSA) requirements, and corporate security policies, procedures and directives.
- Advance knowledge and experience in cybersecurity frameworks such as NIST, ISA/IEC 62443, NERC, CSF, CIS, and MITRE Att&CK.
- Extensive experience in analyzing system application, security, network logging data from a SIEM to create actionable work tasks for a SOC, IT security analysts, or other IT staff.
- Ensure Junior team members are delivering quality deliverables such as weekly status reports and security controls mitigation.
- Experience performing threat modeling and security review to assess new designs and security requirements for new technologies.
- Experience with Windows Servers, Linux/UNIX, enterprise anti-virus, endpoint security, application whitelisting technologies, SIEM, logging configurations, IDS/IPS, authentication methods, TCP/IP, packet capture and analysis.
- Provide security awareness, travel, and other briefings through public speaking, written formats.
- Experience in evaluation of industrial cybersecurity standards and frameworks and selection of the best-fit management and controls frameworks for ENGIE organization and culture.
- Develop Key insights and metrics from Site Data to build meaningful reports
- Experience in an industrial controls environment (power plants/energy, manufacturing, utility, or equivalent) with working knowledge of SCADA/DCS systems and related hardware and software.
- Collaborate with the Application, Infrastructure and Network Teams to implement security controls in the Industrial control’s environments with the ability to communicate in a simplistic manner.
- Working closely with Senior Management and System Owners and other Stakeholders to advise and address cybersecurity concerns.
- Strong verbal and written communication skills across technical and non-technical audiences, solid team player, with demonstrated abilities in analysis and problem-solving.
- Possess knowledge of cyber security fundamentals.
- Development of program policies, procedures, standards, guidelines, and Incident Response plans.
- Deep understanding of network attacks, DDoS, Phishing, email protocols/security/spam, encryption, authentication, logging and log analysis, IP and device reputation, and security rules and policies.
- Experience working with multiple stakeholders such as engineering/operations teams, internal business units, external incident response teams, and law enforcement throughout the incident lifecycle.
- Development of security awareness training and security skills training content.
- Sr. level cyber security incident response experience and skills.
- Provides status reports that summarizes activities completed, key engagement statistics, issues requiring attention, and plans / action items for the next reporting period.
What you bring:
- Bachelor’s degree in Computer Science or a related technical degree
- Develop Key insights and metrics from Site Data to build meaningful reports
- Experience in an industrial controls environment (power plants/energy, manufacturing, utility, or equivalent) with working knowledge of SCADA/DCS systems and related hardware and software.
- Experience working remotely across large enterprises.
- Possess knowledge of cyber security fundamentals.
- The ideal candidate will have the ability to think critically, work in group settings and be proactive in pursuing research and problem-solving with minimal supervision.
- Experience with cyber security standards and practices in multiple industries (e.g., ISA99/IEC 62443, NERC, etc.), and industry certifications such as CISSP or ISACA are a plus.
- Experience with Access Management models in multiple standalone configurations or in wide scoped heterogeneous information systems.
- Knowledge of design, implementation, or life cycle support of process automation and control systems is a plus.
- Knowledge of Industrial Control Systems challenges in multiple industries from Energy to manufacturing and more is a plus.
Why ENGIE?
ENGIE North America isn’t just participating in the Zero-Carbon Transition, we’re leading it! Join us as we develop energy that is more renewable, more efficient, and more accessible to everyone.
Unite with us in leading the transformation of the world of energy! ENGIE is looking for talented and motivated individuals to create the future of energy and customer solutions. Join a rewarding and flexible work environment that encourages innovation and creativity to help customers meet their energy challenges today and in the future. Are you up for the challenge?
At ENGIE, our goal is to support, promote, and thrive on diversity, equity, and inclusion. We do so for the benefit of our employees, customers, products and services, and community. ENGIE is proud to be an equal opportunity workplace, and we are firmly committed to creating an equitable and inclusive environment for all employees.
We are committed to providing employees with a work environment free of discrimination and harassment. All employment decisions at ENGIE are based on business needs, job requirements, and individual qualifications. ENGIE is committed to providing equal employment opportunities regardless of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship, age, sex or gender (including pregnancy, childbirth, and related medical conditions), gender identity, or gender expression (including transgender status), sexual orientation, marital status, civil union, or domestic partnership status, military service or veteran status, physical or mental disability, protected medical condition, genetic information, or any other legally protected category (referred to as “protected characteristics”) as defined by applicable federal, state or local law in the locations where we operate.
If you need assistance with this application or a reasonable accommodation due to a disability, you may contact us at ENGIENA-ENGIEHR@engie.com. This email address is reserved for individuals with disabilities in need of assistance and is not a means of inquiry regarding positions or application status.
Business Unit: GBS
Division:
Legal Entity:
Contract Type:
Professional Experience: Skilled ( >3 experience <15 years) Education Level: Bachelor’s Degree