Cyber Security Engineer

Orion International; Rockville (MD); On-site; USD 112,000 - 128,000; Full time

Benefits offered by this job

401K match 5%

Merit increase

COLA

Short-term bonus

Long-term bonus

Medical/Dental/Vision Insurance

Life and Disability Insurance

20 days leave

11 paid holidays

Job summary

Orion International is seeking an ICT/OT Cyber Security Engineer III to develop and execute cybersecurity strategies for complex plant environments. The role requires integrating security into OT/ICS design, implementing security controls, and advising on risk mitigations within nuclear, manufacturing or utility settings.

The position offers a robust benefits package and a schedule of professional growth opportunities, with a focus on safeguarding critical infrastructure and compliance with CIP

Qualifications

• Background in Industrial Control Systems and/or Operational Technologies for nuclear, heavy utilities or manufacturing.
• 5+ years in cybersecurity, network security, or related field (Level III).
• Knowledge of OT cybersecurity architecture and NIST CSF capabilities.
• Experience managing cybersecurity tools such as NDR/EDR/SIEM.
• Certifications such as GICSP, GCIH, GPEN, CISSP or equivalent preferred.

Responsibilities

• Develop and execute cyber security engineering strategies for plant design and engineering teams.
• Integrate cyber security into plant information and OT systems.
• Implement and assess cyber security systems and solutions for nuclear facilities.
• Support plant operations and recommend mitigations for cyber security issues.

Skills

OT cybersecurity

NIST CSF knowledge

Threat assessment

Security engineering

CIP requirements

Networking/IT systems

Tools

NDR

EDR

SIEM

Job description

Position: ICT/ OT Cyber Security Engineer III

Salary Range: Level III: $112,000- $128,000

Benefit: Robust benefits package that includes a 401K plan with %5 employer match, Annual Merit Increase, Annual COLA increase, Annual Short-Term Bonus, Annual Long-Term Bonus, Medical/Dental /Vision Insurance, Life and Disability Insurance, 20 days’ universal leave, 11 paid holidays

Hours: 8:00am-5:00pm Monday through Friday

Travel Expectations: potential 10% to plant sites or home office

Job Description:

Candidates for this role must either have a background in Industrial Control Systems and/or Operational Technologies supporting nuclear, heavy utilities or manufacturing.

This role is responsible for the development and execution of cyber security engineering strategies and activities in support of plant design and engineering teams. This role integrates the cyber security philosophy into the design of plant information and operational technology systems and is responsible for implementation and assessment of cyber security systems, supports the nuclear plant and recommends solutions to cyber security issues.

Job Minimum Qualifications:

• Typically, five years or more of progressive experience in cybersecurity, network security, or related experience for Level III.
• In-depth knowledge of OT cybersecurity architecture that supports various components of NIST cybersecurity framework capabilities, such as cybersecurity engineering, vulnerability management, identity management, threat intel, prediction and detection, as well as response and recovery.
• Knowledge or experience in software engineering, software development, or utilization of a software development toolset.
• Must have direct knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM.
• GICSP, GCIH, GPEN, CISSP, or equivalent, or other specific training or experience in cyber security operations, design, and engineering.
• Familiarity with standard principles and practices of cybersecurity design for safeguarded plants and facilities.
• Networking/IT systems engineering background and experience.
• Knowledge of Federal requirements for Cyber security for Critical Infrastructure Protection (CIP).
• Knowledge of IEEE and IEC standards related to cyber security in embedded systems and control systems.
• Proficiency in developing and reviewing threat assessments and using results of those assessments to develop comprehensive cyber security designs.