Senior OT/ICS Cyber Security Engineer

Acuity Brands, Inc.; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Acuity Inc. is seeking a talented OT/ICS cybersecurity specialist to join the AcuityOT/ICSCyber Security team. You will work with Supply Chain, Engineering, Cybersecurity, IT, and Risk teams to design, implement, and manage security for industrial control systems.

The ideal candidate has strong background in cyber security and ICS, with experience protecting manufacturing environments, and will help safeguard critical facilities and processes across North America.

Qualifications

• Proven experience protecting ICS in critical manufacturing.
• Knowledge of ISA/IEC 62443 and NIST SP 800-82.
• Understanding IT/OT security best practices.
• Familiar with ICS protocols and industrial networking topologies.

Responsibilities

• Conduct security risk assessments of manufacturing facilities.
• Develop assessment reports for technical and non-technical stakeholders.
• Track remediation progress and verify fixes.
• Monitor IC networks for incidents and respond.
• Collaborate with Engineering, IT and Maintenance to implement security.

Skills

ICS knowledge

ISA/IEC 62443

NIST SP 800-82

IT/OT security

Industrial protocols

Industrial networking

Security technologies

Analytical skills

Teamwork

Job description

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us atwww.acuityinc.com .

Job Summary

Our TeamHave you everentereda buildingand been immersedinaseaoflights and noticedthe shades automaticallyadjust?Have you experienced asmartenvironment thathaspersonalizedlightingfordifferentsettings andoccasions?Modern lighting and controls are everywhere,transforming how we interact withour digitalworld. TheIndustrial Control Systems(ICS)CyberSecurityteamplays a crucial role in safeguardingAcuityInc.’scritical manufacturing and supply chain systems.

AcuityInc.is the North American market leaderin innovative lighting solutions. Our lightsandcomputing, sensing, networkconnected platformsareeverywherewherethere are people.Wehave plenty of awesome projects to work on! Our team is expanding and looking for a security engineer to help in our endeavors.

AbouttheRole

We're seeking a talented OT/ICScybersecurity specialist tojoin the AcuityOT/ICSCyber Security team. You will work closely with other Supply Chain, Engineering, Cybersecurity, IT, and Riskteam members todesign, implement, and manage security measures for industrial control systems. This role involves conducting security assessments,identifyingand mitigating risks, developing securitycountermeasures, and ensuring compliance with industry standards. The ideal candidate will have a strong background in both cyber security and industrial control systems, with a focus on protectingmanufacturing environments.

Key Tasks & Responsibilities (Essential Functions)

We’relooking for professionals with experience inone or more of the below areas:

• Conduct comprehensive security risk assessments ofnew and existing manufacturing facilities, distribution centers, and theindustrial automation systems included within them. This includes threat assessments,vulnerability assessments,impact analysis,hands on validation, and risk analysis
• Prioritizeassessmentfindingsbased onrisk
• Develop assessment reports forboth technical and non-technical stakeholders (e.g., Engineering, Maintenance, Site Leadership, Executive Leadership, etc.)
• Trackprogress on remediation efforts
• Perform detailed analysis of new or existing hardware and software toidentifyhardening opportunities
• Engage with suppliers tounderstand secure configuration capabilities
• Assist IT and Engineer withimplementing hardened configurations

Vulnerability Management:

• Assistin vulnerability identification, triage, and mitigation.
• Developand implement compensating controls where necessary

Security Monitoring and Response:

• Monitor IC networks for security incidents, analyze threats, and respond to incidents to minimize impact and prevent recurrence.
• Work with other cyber personnel as well as Engineering, Maintenance, Operations, and IT toanalyzecontain, eradicate, and recover from cybersecurity incidents

Outreach, Collaboration, and Training:

• Work closely withEngineering, Maintenance,Operations,and IT personnel to integrate security best practicesacross manufacturing site processes
• Educate non-cyberstaff on the importance ofestablishingand maintaining a cyber secure manufacturing environment
• Develop, improve, andmaintaindetailedprocedures for use by cyber, IT, engineering, and maintenance teams to drive consistency and repeatability
• Act as a point of contact for site personnel to ask questions, receive assistance, and otherwiseengagecybersecurity.

Skills and Minimum Experience Required

An IC Security Operations Specialist will have proven experience protecting industrial control systems (ICS) in critical manufacturing infrastructure:

• A working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA, HMIs, Robotics, etc.).
• Strong understanding of cybersecurity frameworks for ISC/OT environments (ISA/IEC 62443, NIST SP 800-82, etc.).
• Knowledge of IT and OT security best practices; a practical understanding of the differences.
• Understanding protocols common in IC environments (e.g., Ethernet/IP, CIP, Modbus, OPC, MQTT, etc.) and industrial networking topologies (e.g., ring, star, etc.).
• Familiar with security technologies within the IC environment such as firewalls, IDS, endpoint security solutions, access control systems, and other related security technologies.
• Strong understanding of network architecture and cybersecurity principles.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a multidisciplinary team.

Why is Acuity Brands a great place for Security Engineers?

• Our team is a strategic part of the direction of our company.
• Our company is a very profitable market leader and provides financial stability.
• You will work with highly talented, fun, and supportive teams.
• We believe in a healthy work/life balance.
• We produce quality technology solutions that you can be proud of.

We value diversity and are an equal opportunity employer.

All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Accommodation for Applicants with Disabilities: As an equal opportunity employer, Acuity Inc. is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans.

If you have difficulty using our online system due to a disability and need an accommodation, you may contact us at [phone], select option 4.

Please clearly indicate what type of accommodation you are requesting and for what requisition.