HEPCO Inc. is seeking a dynamic Cybersecurity Engineer to enhance our operational technology (OT) cybersecurity posture and lead the implementation of a robust OT disaster recovery (DR) environment. In this role, you will collaborate closely with our IT team to foster cross-pollination of best practices between IT and OT environments.

• Cybersecurity Expertise: Leverage your strong understanding of cybersecurity frameworks for ICS/OT environments (e.g., ISA-99/IEC 62443, NIST SP 800-82, CIS) to safeguard our OT systems and infrastructure.
• Project Support: Contribute to multiple projects by maintaining and supporting technology solutions in areas such as networking, servers, virtualization, and security technologies within the OT domain.
• Risk Assessment: Conduct comprehensive risk assessments to identify vulnerabilities, threats, and potential impacts on OT systems, developing strategies to mitigate these risks.
• Security Architecture: Design and implement secure architectures for OT systems, encompassing secure network infrastructures, access control mechanisms, intrusion detection and prevention strategies, and other critical security controls.
• OT Disaster Recovery: Lead the development of the OT DR study, oversee its recommendations' implementation, and take responsibility for testing and maintaining the OT environment, including DR.
• Incident Response Planning: Develop and implement incident response plans tailored to OT systems, ensuring effective detection, response, and recovery from security incidents.
• Security Monitoring: Deploy and manage security monitoring tools to continuously oversee OT systems for signs of malicious activities or anomalies, promptly responding to potential security breaches.
• Vulnerability Management: Conduct regular vulnerability assessments and penetration testing, address identified weaknesses, and ensure systems are up-to-date with patches.
• Security Policies and Standards: Develop and enforce OT-specific security policies and standards, defining baselines, access control policies, and conducting security awareness training.
• Collaboration: Collaborate with cross-functional teams, including IT, operations, and management, to facilitate effective communication and coordination of cybersecurity initiatives.
• Compliance and Regulations: Ensure compliance with relevant standards such as NERC CIP and NIST 800-53, maintaining a strong commitment to security and privacy control.
• Incident Response and Recovery: Lead incident response efforts during cybersecurity incidents, investigate, mitigate damages, and implement remediation measures.
• Protection of Intellectual Property: Safeguard valuable OT information from theft, sabotage, or unauthorized access to protect the organization's assets and competitive advantage.

Qualifications:

• Bachelor's degree in Computer Science, Computer/Electrical Engineering, Information Technology, or related technical field.
• 5-10 years of combined OT/IT experience.
• Knowledge of security processes and organizational design.
• Experience with network analysis and penetration testing tools such as BackTrack, Metasploit, Rapid 7 Nexpose, NMAP, and Wireshark.
• Understanding of SCADA operations in critical infrastructure sectors (Water, Transportation, Power, Energy, Oil, and Gas).
• Strong interest in cybersecurity within industrial control systems and the Internet of Things (IoT).
• One or more relevant professional certifications (e.g., CCNA, GRID, GPEN, GSLC, CISA, CISSP).

Desired Skills:

• Effective communication skills and a strong work ethic.
• Ability to work collaboratively as an adaptable team player.
• Familiarity with CIS controls.

Benefits:

• Health Insurance
• Sick Time
• 401k

Location:
10322 Lomond Drive, Manassas, VA 20109

By clicking apply, you are opting in to receiving text/SMS communication with one of our recruiters.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, gender expression, marital status, national origin, age, veteran status, disability, or any other protected class.