Cybersecurity Engineer Specialist

Concurrent Technologies Corporation; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Concurrent Technologies Corporation is seeking an experienced cybersecurity professional to support IC/OT environments at Camp Lejeune, NC. The role emphasizes vulnerability assessments, DISA STIGs alignment, and remediation guidance to improve industrial control systems security.

You will use ACAS, Tenable.sc, Nessus, and SCAP to scan, analyze findings, and coordinate fixes with IT, OT, and government staff while maintaining secure, compliant operations.

Qualifications

• Bachelor’s Degree in Computer Science or IT, or 2+ years cybersecurity work experience.
• Experience in IC/OT environments with FRCS or similar industrial systems.
• Experience using vulnerability assessment platforms: ACAS, Tenable.sc, Nessus, SCAP.
• Ability to obtain and maintain a Secret security clearance.
• Applicable DoD 8140 baseline certification.

Responsibilities

• Plan and conduct cybersecurity vulnerability assessments of IC/OT testbeds and assets.
• Use ACAS, Tenable.sc, Nessus, SCAP to perform vulnerability scans and analyze results.
• Coordinate remediation with system admins, OT engineers, vendors and government personnel.
• Review Windows, Linux, Nutanix, firewalls and OT device configurations against DISA STIGs/SRGs.
• Conduct security reviews, investigate logs, and analyze Dragos alerts and anomalies.
• Develop remediation guidance, hardening procedures, and compensating controls.
• Maintain change/configuration/risk management and documentation processes.

Skills

IC/OT cybersecurity experience

Security clearance eligibility

Analytical problem solving

Education

Bachelor’s Degree in CS or IT

2+ years cybersecurity experience

Tools

ACAS

Tenable.sc

Nessus

SCAP

Job description

Concurrent Technologies Corporation

Camp Lejeune, NC

Minimum Clearance Required: Secret

Clearance Level Must Be Able to Obtain: Secret

As a trusted partner and leader in providing energy and sustainability consulting services to the federal government, Concurrent Technologies Corporation (CTC) understands the increasing complexity of achieving energy security and data management in a changing world. As part of the Energy, Resilience and Sustainability (ERS) Division, you will collaborate with experts to provide comprehensive policy, planning, and implementation services to deliver solutions that address critical infrastructure resilience and security, and data management issues and support the military mission, while reducing environmental impacts. We take our role seriously, as our efforts ensure our installations and assets are prepared in any operating environment, present and future.

Key Responsibilities:

• Plan and conduct authorized cybersecurity vulnerability assessments of IC/OT testbed systems, configurations, devices, servers, applications, and FRCS assets.
• Use ACAS, Tenable.sc, Nessus, SCAP, and comparable platforms to perform vulnerability scans.
• Analyze scan results, validate findings, eliminate false positives, and determine operational relevance.
• Coordinate remediation activities with system administrators, network engineers, OT engineers, vendors, and Government personnel.
• Conduct assessments in a manner that protects the safety, availability, and integrity of industrial systems.
• Test patches, firmware, updates, configuration changes, and cybersecurity controls within the testbed prior to production deployment.
• Review configurations for Windows, Linux, Nutanix, firewalls, network devices, applications, and OT devices against DISA STIGs and SRGs.
• Perform manual security reviews when automated scanning is unsafe or not operationally appropriate.
• Investigate OS logs, application logs, authentication logs, firewall logs, network logs, security logs, and OT monitoring alerts.
• Conduct analysis of Dragos alerts, suspicious communications, unauthorized connections, and anomalous behavior.
• Capture and analyze network traffic to identify misconfigurations, protocol issues, unauthorized communications, scanning activity, and suspicious behavior.
• Research vulnerabilities across platforms including Nutanix, Windows Server, Linux, Metasys, Niagara, Rockwell Automation, Ignition, SEL, PLCs, HMIs, RTUs, industrial switches, firewalls, and remote-access equipment.
• Develop technical remediation guidance, mitigations, hardening procedures, and compensating controls.
• Conduct cybersecurity and physical-security inspections of FRCS equipment rooms, server rooms, control cabinets, network enclosures, field devices, network ports, access-control systems, and supporting infrastructure.
• Identify and document physical-security and cyber vulnerabilities such as unsecured cabinets, exposed ports, unauthorized connections, improper labeling, unsupported devices, and unapproved configurations.
• Assess compliance using NIST, DoD, USMC and other security requirements to include the CNSSI 1253 Security controls and DISA STIGs/SRGs
• Develop tabletop exercises, technical advisories, continuous-monitoring metrics, inspection reports, vulnerability reports, and recurring status reports.
• Maintain strong adherence to formal change management, configuration management, risk management, testbed validation, and documentation processes.
• Stay abreast of emerging cyber threats, attack techniques, and industry best practices in computer network defense. Assess their potential impact on the organization and make recommendations for proactive measures.
• Participate in conferences, workgroups, meetings and other required events..

Basic Qualifications:

• Bachelor’s Degree in Computer Science or IT related field or at least 2 years of experience performing Cybersecurity functions.
• Demonstrated experience in IC/OT environments involving FRCS or similar industrial systems.
• Experience using major vulnerability assessment platforms (ACAS, Tenable.sc, Nessus, SCAP).
• Ability to obtain and maintain a Secret security clearance.
• Applicable DoD 8140 baseline certification.

Preferred Qualifications:

• Experience with USMC IT and OT/FRCS Systems and cybersecurity processes
• Certifications: CySA+, CASP+, CCNA, Network+, Linux+, Dragos, CISA, CISM, CEH, CISSP, GICSP
• Experience with vulnerability research across industrial platforms (Nutanix, PLCs, HMIs, RTUs, firewalls, industrial switches, SEL, Rockwell, etc.).
• Experience generating formal cybersecurity reports, tabletop exercises, advisories, and continuous-monitoring plans.
• Experience performing cybersecurity analysis in operational technology environments.
• Strong understanding of IC/OT safety considerations when conducting assessments.

Why CTC?

• Our teams at CTC are passionate and thrive on collaboration in a high-paced team environment
• When we encounter a difficult problem, we have a variety of talented and diverse employees that work together to solve the toughest challenges
• Competitive salary and benefits package
• Although our work at CTC is extremely important, we also recognize the need for our employees to maintain a proper mix of work and personal life
• Visit www.ctc.com to learn more

https://concurrent-technologies-corporation.breezy.hr/

Staffing Requisition: SR# 2026-0119

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law.”