Cyber Security Analyst - 1898 & Co (Chesapeake)

Burns & McDonnell; Norfolk (VA); On-site; USD 65,000 - 90,000; Full time

Job summary

Burns & McDonnell seeks an Analyst in Industrial Cybersecurity to support IT and OT security projects, including network penetration testing and vulnerability assessments.

You will help design and implement technical controls aligned with CSF and RMF, and assist in creating secure control network solutions at client sites across various industries.

Qualifications

• Bachelor degree required in Cybersecurity, CS, CE, EE, or related field.
• Internship experience preferred.
• Basic understanding of cybersecurity principles and technologies.
• General knowledge of vulnerability assessments, penetration tests, and related tools.

Responsibilities

• Assist with planning, design, development and implementation of technical controls and policies for cybersecurity compliance.
• Support documentation of network traffic, firewall services and solutions.

Skills

Analytical thinking

Communication skills

Problem solving

Security awareness

Education

Bachelor's degree in Cybersecurity / CS / CE / EE / related field

Internship experience preferred

Job description

Description

The Analyst Industrial Cybersecurity will support projects addressing Information Technology (IT) and Industrial Control System security. The Analyst Industrial Cybersecurity supports the execution of projects consisting of network penetration testing, web application security testing, cybersecurity vulnerability assessments, secure system design and integration, and/or development of cybersecurity programs at client sites in a wide variety of industries utilizing the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), and other industry or data specific compliance frameworks and regulations.

• Assist with the planning, design, development and implementation of technical controls, procedures and policy associated with adherence to cybersecurity compliance and/or regulatory standards.

• Maintain highest level of integrity, protecting confidentiality and security of client and project information.

• Assist with the policies and procedures, secure process control network design, technical and design recommendations for the implementation of firewalls and other network security and compliance controls.

• Assist with technical documentation of network traffic as well as firewall services and solutions including explanations and diagrams.

• Assist with operational issues and implement design alterations to address these issues.

• Assist in penetration testing and vulnerability assessments of IT and Operational Technology (OT) networks for both compliance and security purposes.

• Assist with post-event analysis of unusual events and assist with direction of needed changes to procedures or processes in response.

• Assist in technical issues, identify the implications to the business, and be able to communicate any impacts with other operational departments within the business.

• Pursue, obtain, and maintain industry recognized IT certifications related to cybersecurity such as ethical hacking, network engineering, Industrial Control Systems (ICS), Supervisory Control and Data Acquisition (SCADA), risk management, and others as necessary.

• Maintain knowledge of the cybersecurity capabilities of operating systems, networking devices, control systems, and vendor offerings.

• Attend industry specific technical conferences.

• Actively participate in a qualitative and quantitative problem-solving environment.

• Collaborate with other groups and divisions inside Burns & McDonnell to provide cybersecurity services.

• Minimum of a 3.0 GPA strongly preferred.

• Involvement on campus or in the community preferred.

• Performs other duties as assigned.

• Complies with all policies and standards.

Qualifications

• Bachelor Degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, or a related technical field required.

• Or applicable years of experience may be considered in lieu of degree requirement.

• Internship experience preferred.

• Basic understanding of cybersecurity principles and general knowledge of cybersecurity technologies, as well as industry recognized certifications.

• General knowledge of cybersecurity vulnerability assessments, penetration tests, and the tools/techniques involved in both.

• General knowledge of the capabilities and/or configuration of cybersecurity controls, specifically those relating to firewalls, access control, authentication, anti-virus/anti-malware, patching, and logging.

• Maintain a basic knowledge of current and emerging state-of-the-art computer and network systems technologies, architectures, and products.

• Maintain a working knowledge of applicable cybersecurity standards involving control systems, including those relating to process networks.

• General knowledge of control systems utilized by utilities, manufacturing, oil and gas, transportation, smart buildings, and cities.

• Effective written and oral communication skills.

• Strong analytical and critical thinking skills.

• Ability to operate under pressure and under tight deadlines, to operate in on-site industrial, corporate, and government work.

• Demonstrated capability to make sound decisions based on good security practices and principles.

• Demonstrate an understanding of business principles and operational security practices specific to engineering and/or security consulting.

• Knowledge of modern and legacy computer networking and telecommunications.

• Knowledge physical cabling for network communications and control system Input/Output.

• Ability to obtain and maintain access to current and future client sites, including ability to obtain and maintain applicable U.S. security clearances.

• Candidates must be legally authorized to work permanently (i.e., without time limitations, without restrictions or without need for work sponsorship) in the country where this position is located.

This job posting will remain open a minimum of 72 hours and on an ongoing basis until filled.

EEO/Disabled/Veterans

Job

Business Analysts

Primary Location

US-VA-Norfolk

Schedule

Full-time

Travel

Yes, 20 % of the Time

About 1898 & Co.

1898 & Co. is a business, technology and security solutions consultancy where experience and foresight come together to unlock lasting advancements. We innovate today to fuel our clients’ future growth, catalyzing insights that drive smarter decisions, improve performance and maximize value. As part of Burns & McDonnell, we draw on more than 120 years of deep and broad experience in complex industries as we envision and enable the future for our clients.

Req ID

264448

Job Hire Type

New Grad #LI-MH #E98 N/A