Key Responsibilities:
As the OT/ICS Cybersecurity Engineer, you will work with a team of cybersecurity professionals that provide support across the Jacobs delivery lifecycle. From ensuring design compliance with standards to providing discrete cybersecurity assessments, you’ll identify risk and provide mitigation measures that protect our clients from the most dangerous forms of cyber-attacks. You will design cybersecurity offerings to be consistent with NIST, NERC CIP and other contemporary cybersecurity standards in ICS environments. You’ll understand the cybersecurity needs of large infrastructure programs and develop cybersecurity offerings to include 3rd party technologies that ensure that system and network data is visible and secure. In this role, you’ll work with both sales and operations teams to embed cybersecurity and risk reduction into new contract opportunities as well as active programs. You’ll work in close coordination with SCADA instrumentation and controls teams to design and integrate SCADA and OT with contemporary security architectures. From design through the commissioning of large infrastructure, you’ll put your hands on experience with ICS cybersecurity to work at Jacobs. You’ll participate in our cybersecurity assessment process including on-site visits to review facility cybersecurity posture and develop technical memorandums.
Key Responsibilities:
- Support cybersecurity design of OT networks through compliance with appropriate security standards
- Provide cybersecurity assessments of OT/ICS across Jacobs markets with analysis of current state, mitigation, and solution implementation
- Support OT integration of switching, servers, firewalls, virtual machines, and other technology with proper security standards
- Perform forensics analysis of OT devices to support cyber incident analysis
- Develop consultative OT security solutions which include services such as attack emulation, penetration testing, threat hunting, and deception operations
- Travel to project sites to provide support of ICS networks, manage and maintain converged platforms, virtualization, networks, security platforms and various other OT/IoT technologies
- 5+ years of experience in OT/ICS security with experience leading engagements
- Experience with OT network monitoring and data collection tools
- Technical background with hands-on experience in the conduct of security reviews and assessments of OT security and cybersecurity risk landscapes
- Knowledge of DNP, Modbus, SEL, IEC-61850 protocols - serial & IP based
- Experience working with firewalls and wireless communication technology
- Experience working with virtualization platforms, Active Directory Domain Services, and DNS
- Familiarity with IEC-62443 and other industrial cybersecurity standards
- Knowledge of the Purdue Enterprise Reference Architecture
- Knowledge of Zero Trust Architecture
Preferred:
- IAT Level II Certification (Security+, GICSP)
- Cisco CCNA, Fortinet NSE-4, JNCIA or equivalent network certification
- Expertise in MITRE ATT&CK® and ATT&CK for ICS Frameworks
- Hands-on experience programming ICS vendor Human Machine Interface (HMI) equipment as well as Programmable Logic Controllers (PLCs)
- Experience with Industrial Internet of Things and edge computing
- Working knowledge of NIST SP 800 series guidelines
- Experience implementing secure remote access solutions
We offer:
- Unique company culture fostering individual career growth and work-life balance
- Full-time employment contract with salary corresponding to qualifications
- Hybrid working model
- Flexible working hours (we start between 7:30-10:00)
- Flexible benefits package (Lux Med medical care, psychological care, life insurance, My Benefit cafeteria system, including Multisport card co-financing, car park sharing system)
- Membership in Jacobs employee networks (Women's Network, OneWorld, PRISM, Careers Network, Green Team, Toastmasters, Collectively and others)
- Continuous development opportunities, including a range of professional trainings and certifications, Graduate Development Program, Learners’ Community, self-learning platform
- Opportunity to take part in language courses (English, German, Polish)
Please note that in order to be considered for this position you need to be resident in, or willing to relocate to, the country this position is advertised in, and a. have a current right to work visa in that country, or b. be prepared to go through a work visa process if the hiring manager/business unit is willing to accommodate this.
