Analyst / Senior Analyst, Technology Security (SP)

About the role

The Analyst / Senior Analyst, Technology Security (ICS) reports to the Manager, Technology Security and is a technical expert for plant control systems networks and computing assets and ICS cybersecurity best practices. The position is responsible for hands-on troubleshooting, administrating, supporting, maintaining and improving control system networks, computers, applications, and cybersecurity initiatives including documentation.

Responsibilities

• Serve as the cybersecurity advisor to the Controls Systems experts.
• Maintain, troubleshoot and improve existing cybersecurity management systems including endpoint security, patch management, logging, asset monitoring, access control, IDS, Active Directory Group Policies and administration, firewall rules, and network configuration management.
• Support development of cybersecurity framework including creation/revision of policies, guidelines, standards and procedures.
• Support development of practical ICS Asset Management KPIs and associated reporting.
• Build and administer the Maritime Transportation Security Act (MTSA) Cybersecurity compliance program.
• Participate in ICS Security Incident Response.
• Support development of risk assessment and cybersecurity Management of Change process.
• Develop design basis, preliminary estimates, and schedules for project design scopes.
• Work with multidisciplinary Technical Services team to define problems, establish work scopes, prepare task budgets and schedules, plan work, provide technical direction, and report the work status to management.
• Reinforce safety and environmental awareness through frequent job observations and by interfacing with plant personnel.
• Interact with and support IT, Technology Security, Site Operations, Regulatory Affairs, and other departments as required.

Qualifications

• Strong understanding of ICS cybersecurity standards/best practices and systems administration in an operating facility.
• Knowledge of secure network design and architecture, active directory management and GPO development, vulnerability management, systems hardening, network and asset monitoring and troubleshooting and backup and recovery systems.
• Knowledge of Windows, Linux, VMWare, HyperV and Cisco platforms.
• Knowledge of cyber risk assessment methodology and incident response.
• Knowledge of Yokagawa/GE/Allen Bradley systems is a plus.

Skills

• Strong leadership and administrative abilities.
• Exceptional written, verbal and interpersonal communication skills.
• Able to communicate effectively at all levels of an organization and with individuals and groups from different disciplines, industries and governmental agencies.
• Possess the personality and ability to relate to and to establish a mutually respectful relationship with management, peers and the various facility level workers (Plant Manager, plant supervision and plant workers) whom are all responsible for ensuring good operations.
• Organized, planning skills, able to manage multiple activities and programs in timely fashion and with a high degree of accuracy, able to meet work deadlines.
• Exceptional problem solving and analytical skills.
• Computer savvy including Microsoft Office Suite including Word, Excel, Access, Project and PowerPoint.

Education and Experience

• Bachelor’s degree in computer engineering, Computer Science, or related cybersecurity field is required.
• Master’s degree preferred.
• Security Certifications such as CISSP, CCNA, GISCP, ISA/IEC 62443 Cybersecurity Expert, or GICSP highly preferred.
• Analyst: Minimum two (2) years relevant work experience within cybersecurity space is required. ICS cybersecurity experience working with an operating LNG, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing, defense, and/or other critical infrastructure facility preferred.
• Senior Analyst: Minimum five (5) years relevant work experience within cybersecurity space is required. Must have some ICS cybersecurity experience working with an operating LNG, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing, defense, and/or other critical infrastructure facility.