As theOT/ICS Cybersecurity Engineer,you will work with a team of cybersecurity professionals that provide support across the Jacobs delivery lifecycle. From ensuring design compliance with standards to providing discrete cybersecurity assessments, you’ll identify risk and provide mitigation measures that protect our clients from the most dangerous forms of cyber-attacks. You will design cybersecurity offerings to be consistent with NIST, NERC CIP and other contemporary cybersecurity standards in ICS environments. You’ll understand the cybersecurity needs of large infrastructure programs and develop cybersecurity offerings to include 3rd party technologies that ensure that system and network data is visible and secure. In this role, you’ll work with both sales and operations teams to embed cybersecurity and risk reduction into new contract opportunities as well as active programs. You’ll work in close coordination with SCADA instrumentation and controls teams to design and integrate SCADA and OT with contemporary security architectures. From design through the commissioning of large infrastructure, you’ll put your hands on experience with ICS cybersecurity to work at Jacobs.
Responsibilities:
In this role, you will be part of a team of ICS cybersecurity engineers to evaluate, test, and remediate ICS/SCADA OT systems. You will identify vulnerabilities and propose workable solutions in close coordination with infrastructure program teams. You’ll participate in our cybersecurity assessment process including on-site visits to review facility cybersecurity posture and develop technical memorandums.
Key Responsibilities are as follows:
- Support cybersecurity design of OT networks through compliance with appropriate security standards
- Provide cybersecurity assessments of OT/ICS across Jacobs markets with analysis of current state, mitigation, and solution implementation
- Support OT integration of switching, servers, firewalls, virtual machines, and other technology with proper security standards
- Perform forensics analysis of OT devices to support cyber incident analysis
- Develop consultative OT security solutions which include services such as attack emulation, penetration testing, threat hunting, and deception operations
- Travel to project sites to provide support of ICS networks, manage and maintain converged platforms, virtualization, networks, security platforms and various other OT/IoT technologies
- 5+ years of experience in OT/ICS security with experience leading engagements
- Experience with OT network monitoring and data collection tools
- Technical background with hands-on experience in the conduct of security reviews and assessments of OT security and cybersecurity risk landscapes
- Knowledge of DNP, Modbus, SEL, IEC-61850 protocols – serial & IP based
- Experience working with firewalls and wireless communication technology
- Experience working with virtualization platforms, Active Directory Domain Services, and DNS
- Familiarity with IEC-62443 and other industrial cybersecurity standards
- Knowledge of the Purdue Enterprise Reference Architecture
- Knowledge of Zero Trust Architecture
Preferred:
- IAT Level II Certification (Security+, GICSP)
- Cisco CCNA, Fortinet NSE-4, JNCIA or equivalent network certification
- Expertise in MITRE ATT&CK® and ATT&CK for ICS Frameworks
- Hands-on experience programming ICS vendor Human Machine Interface (HMI) equipment as well as Programmable Logic Controllers (PLCs)
- Experience with Industrial Internet of Things and edge computing
- Working knowledge of NIST SP 800 series guidelines
- Experience implementing secure remote access solutions
