Product Cyber Security Project Engineer

S&C Electric Company; Chicago (IL); Hybrid; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as a Product Cyber Security Engineer, where your expertise will help secure critical infrastructure and shape the future of energy solutions. You'll be part of a dynamic team focused on product development, ensuring robust cyber security practices are integrated into embedded systems and cloud applications. With a commitment to innovation and resilience, this role offers you the chance to make a significant impact on tomorrow's energy challenges. If you're passionate about cyber security and eager to contribute to a safer, more reliable electrical grid, this opportunity is perfect for you.

Qualifications

• 5+ years of experience as a cyber security engineer.
• Experience with common security tools for detecting vulnerabilities.
• Understanding of industry standards for cybersecurity.

Responsibilities

• Develop cyber security risk assessments and test procedures.
• Participate in vulnerability scans and assist in policy development.
• Enhance product cyber security and mitigate emerging threats.

Skills

Cyber Security

Information Security Assessments

Analytical Skills

Embedded Systems

Cloud-Based Applications

Risk Assessment

Education

Bachelor's Degree in Computer Science

Relevant Cyber Security Certifications

Tools

NIST 800-53

NERC CIP

IEEE 1686

IEC 62351

Job description

As an S&C Electric team member, you'll work on projects that have real-world impact. You'll help transform the grid for resilient and reliable power worldwide. S&C has more than a 100-year history of innovation and has been 100% employee-owned since 2012. We continue this legacy as a trusted, forward-thinking leader in the electrical industry. You will advance a safer, more reliable, and more resilient electrical grid. Our products help the grid adapt to severe weather and transition to clean energy. We're big enough to be a respected industry leader but small enough for you to impact our company directly. Our commitment gives you opportunities to impact on and off the job positively.

Join S&C to make an impact on tomorrow's energy challenges and become an employee-owner!

Hours

• 8:00 am - 5:00 pm (Mon-Fri) Hybrid

Compensation

At S&C, we are dedicated to providing competitive and equitable compensation for all our team members, and we are committed to transparency in our pay practices. The estimated annual base salary range for this position in the United States can be found in the JOB INFO section below. Individual pay within this salary range is determined by several compensable factors, including performance, knowledge, job-related skills and experience, and relevant education or training. This role is also eligible for S&C's annual incentive plan (AIP), subject to eligibility criteria.

Join Our Team as a Product Cyber Security Engineer!

Are you passionate about Product Security? S&C Electric Company is seeking a dynamic individual to coordinate our product cyber security function. As a Product Cyber Security Engineer, you'll be crucial in ensuring smooth operations and supporting our diverse team. We are seeking a Product Cyber Security Project Engineer to enable S&C's cyber security vision for product development to include embedded IoT devices as well as cloud-based, desktop, and mobile applications. The skillset requires a technical understanding of cyber security best practices, implementation with the ability to clearly communicate cyber security issues to technical leaders with Product Development. Prior experience with information security assessments, controls, and testing is essential for this position. Cyber security experience maintaining critical infrastructure is preferred. The successful candidate will join a high-performance and cross-functional team.

Key Responsibilities:

• Development of cyber security risk assessments
• Develop cybersecurity test procedures and participate in cybersecurity vulnerability scans/assessments using common tools.
• Outstanding analytical skills and the initiative to remain current with new changes in the cyber security technical field.
• Assist in developing cyber security educational material
• Participate in evaluating proposed projects, software vendors, and S&C business practices for potential cyber concerns, and assist in the development of policy and procedure to address the concerns
• Participate in Cyber security code reviews
• Develop policies and procedures that will enhance product cyber security and mitigate emerging threats through multi-year roadmaps
• Participate in ongoing activities and strategic planning efforts to address emerging security threats and to further enhance S&C's cyber posture

What you'll Need to Succeed:

• Experience with common security tools for detecting and monitoring vulnerabilities
• Experience with embedded systems and cloud-based applications
• Understanding of industry standards including the following:

o NIST - 800-53 Security Controls

o NERC CIP

• Bachelor's degree in computer science or other related technical degree and relevant cyber security certifications.
• 5 years of experience as a cyber security engineer
• 2 years of experience in a product development environment.
• Industry experience with applicable product cybersecurity standards such as IEEE 1686, NIST 800-53, IEC 62351, and NERC-CIP
• Experience with implementing product cybersecurity and data security controls
• Ability to map necessary cybersecurity requirements to new products based on risk and cost factors

Preferred:

• Current CISSP certification is desirable

S&C Electric is committed to equal-opportunity employment. All employees and applicants will be considered without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. If you are an individual with a disability and need an accommodation to complete the application, please email us at [e-mail].

No fixed deadline

#LI-BB1