Principal Sys Security Eng - Real Time

Constellation; Houston (TX); On-site; USD 136,000 - 151,000; Full time

Benefits offered by this job

Bonus program

401(k) with company match

Medical, dental & vision benefits

Paid time off

Job summary

Constellation is seeking a Principal Systems Security Engineer-Real Time to lead security engineering across industrial control systems and OT environments. You will liaise with Generation OT teams, Legal, Security, Architecture, and Cloud/Infrastructure to craft and implement effective ICS security designs and operate with minimal supervision while updating leadership regularly.

The role requires deep knowledge of security technologies, incident response, and risk-based design, with engagement

Qualifications

• Bachelor's degree in Information Systems with 8 years' experience; or 12 years in lieu.
• Strong analytical, technical, and cyber security principle application.
• 8+ years in cyber security architecture and design.
• Experience with ICS security solutions (Boundary, EDR, SIEM).
• Knowledge of network services, protocols, and incident responses.
• Understanding of OSI model, TCP/IP, DNS; SCADA knowledge.
• Experience developing regulatory roadmaps and compliance strategies.
• Knowledge of cyber security program elements and incident response.

Responsibilities

• Work with partners to ensure differentiated solutions and excellent customer experience.
• Verify security design specifications for ICS assets using a risk-based approach.
• Collaborate with Security Engineering and Architecture teams to secure Constellation's computing environment.
• Review regulatory roadmaps and assess new controls for compliance strategies.
• Maintain regulatory maps to identify gaps and plan improvements.
• Support regulatory audits.
• Provide coaching and mentorship for IT personnel.
• Promote inclusion and teamwork.

Skills

Cyber security architecture

Network security

Incident response

TCP/IP basics

Regulatory compliance

SIEM/EDR

Education

BS in Information Systems

Tools

Boundary

EDR

NERC CIP

Job description

Who We Are

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes.

Who We Are

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes. Our culture and employee experience make it clear: We are powered by passion and purpose. Together, we are creating healthier communities and a cleaner planet, and our people are the driving force behind our success. At Constellation, you can build a fulfilling career with opportunities to learn, grow and make an impact. By doing our best work and meeting new challenges, we can accomplish great things. Join us in meeting the country's energy needs today and tomorrow.

Total Rewards

Constellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more. Expected salary range of $135,900 to $151,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).

Primary Purpose Of Position

Principal Systems Security Engineer-Real Time possesses both a deep knowledge of current and planned security technologies across the Power generation environments. The Principal Systems Security Engineer-Real Time role acts as a liaison between the Generation OT teams, Legal, Security, Architecture groups, and Cloud and Infrastructure Operations/Engineering teams to effectively communicate and lead Industrial Control System security engineering design specification and implementing effective Industrial Control System security solutions. This role actively participates in relevant industry Industrial Control System cyber security workgroups and forums and also provide guidance for the development of documentation to support ongoing Industrial Control System security systems operations, maintenance, and problem resolution. This role must have an in-depth understanding of network infrastructure, firewalls, industrial control systems and intrusion detection systems, Security Information and Event Management (SIEM) systems, Endpoint Detection and Response (EDR) technologies and how they strategically intersect with business requirements. This role must also operate independently with little or no supervision yet provide frequent and relevant updates to leadership and stakeholders.

Primary Duties And Accountabilities

• Work with partners to ensure differentiated solution offerings and exceptional customer experience
• Verify appropriate security design specifications are in place for Industrial Control System assets using a risk-based approach in alignment with Constellations Cyber Security objectives.
• Works with Constellation Security Engineering and Security Architecture Teams to develop a thorough understanding of Constellation's evolving computing environment, and the security technologies required to secure it.
• Review current regulatory roadmaps and help evaluate new external and internal controls to determine where they should fit into existing compliance strategies.
• Maintain a map of current regulatory and internal requirements applicable to Constellation and current architectures to identify gaps and help create projects for continuous improvement.
• Support regulatory audits
• Provide coaching/ mentorship for IT personnel. Participate in career development and recognition activities.
• Promote inclusion and foster teamwork, collaboration, and a learning organization.

Minimum Qualifications

• Bachelor's degree in Information Systems with 8-years experience, in lieu of degree 12-years experience
• Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff
• 8-years of diverse experience in cyber security architecture and design, or equivalent combination of education and work experience.
• Experience with enterprise and Industrial Control System specific security solutions (Boundary, Endpoint Detection and Response, Security information and Event Management, Passive Network Monitoring, etc.)
• Knowledge of how network services and protocols interact to provide network communications.
• Knowledge of incident categories, incident responses, and timelines for responses
• Experience supporting projects, planning, maintenance and operations
• Knowledge of intrusion detection methodologies and techniques for detecting host and network based intrusions via intrusion detection technologies
• Knowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities.
• Knowledge of different classes of attacks (e.g., passive, active, insider, close in, distribution)
• Knowledge of basic system administration, network, and operating system hardening techniques
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).
• Knowledge of OSI model and underlying network protocols (e.g., TCP/IP, Dynamic Host Configuration Protocol [DHCP]), and directory services (e.g., Domain Name System [DNS]).)
• Demonstrated knowledge of SCADA and control systems
• Demonstrated experience developing and implementing regulatory roadmaps and evaluating new external or internal controls for integration into existing compliance strategies

Preferred Qualifications

• Graduate degree in cyber security or related area of expertise.
• Skill in using security event correlation tools
• In-depth knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education
• GIAC Certifications or courses
• CISSP or SSCP designation
• Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)
• Knowledge of system and application security threats and vulnerabilities specific to Industrial Control System
• Demonstrated experience in NERC CIP based systems and compliance based technical architecture and applying compliance frameworks to industrial control systems