Senior OT Cyber Security Engineer

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

Job Summary

Our Team

Have you ever entered a building and been immersed in a sea of lights and noticed the shades automatically adjust? Have you experienced a smart environment that has personalized lighting for different settings and occasions? Modern lighting and controls are everywhere, transforming how we interact with our digital world. The Industrial Control Systems (ICS) Cyber Security team plays a crucial role in safeguarding Acuity Inc.’s critical manufacturing and supply chain systems.

Acuity Inc. is the North American market leader in innovative lighting solutions. Our lights and computing, sensing, network connected platforms are everywhere where there are people. We have plenty of awesome projects to work on! Our team is expanding and looking for a security engineer to help in our endeavors.

About the Role

We're seeking a talented OT/ICS cybersecurity specialist to join the Acuity OT/ICS Cyber Security team. You will work closely with other Supply Chain, Engineering, Cybersecurity, IT, and Risk team members to design, implement, and manage security measures for industrial control systems. This role involves conducting security assessments, identifying and mitigating risks, developing security countermeasures, and ensuring compliance with industry standards. The ideal candidate will have a strong background in both cyber security and industrial control systems, with a focus on protecting manufacturing environments.

Key Tasks & Responsibilities (Essential Functions)

We’re looking for professionals with experience in one or more of the below areas:

Cyber Risk Assessments:

• Conduct comprehensive security risk assessments of new and existing manufacturing facilities, distribution centers, and the industrial automation systems included within them. This includes threat assessments, vulnerability assessments, impact analysis, hands on validation, and risk analysis
• Prioritize assessment findings based on risk
• Develop assessment reports for both technical and non-technical stakeholders (e.g., Engineering, Maintenance, Site Leadership, Executive Leadership, etc.)
• Track progress on remediation efforts

System Hardening:

• Perform detailed analysis of new or existing hardware and software to identify hardening opportunities
• Engage with suppliers to understand secure configuration capabilities
• Assist IT and Engineer with implementing hardened configurations
• Document detailed hardening procedures for future use
• Perform system hardening audits

Vulnerability Management:

• Assist in vulnerability identification, triage, and mitigation.
• Develop and implement compensating controls where necessary

Security Monitoring and Response:

• Monitor ICS networks for security incidents, analyze threats, and respond to incidents to minimize impact and prevent recurrence.
• Work with other cyber personnel as well as Engineering, Maintenance, Operations, and IT to analyze contain, eradicate, and recover from cybersecurity incidents

Outreach, Collaboration, and Training:

• Work closely with Engineering, Maintenance, Operations, and IT personnel to integrate security best practices across manufacturing site processes
• Educate non-cyber staff on the importance of establishing and maintaining a cyber secure manufacturing environment
• Develop, improve, and maintain detailed procedures for use by cyber, IT, engineering, and maintenance teams to drive consistency and repeatability
• Act as a point of contact for site personnel to ask questions, receive assistance, and otherwise engage cybersecurity.

Skills and Minimum Experience Required

An ICS Cyber Security Operations Specialist will have proven experience protecting industrial control systems (ICS) in critical manufacturing infrastructure:

• A working knowledge of industrial control systems (e.g., DCS, PLCs, SCADA, HMIs, Robotics, etc.).
• Strong understanding of cybersecurity frameworks for ICS/OT environments (ISA/IEC 62443, NIST SP 800-82, etc.).
• Knowledge of IT and OT security best practices; a practical understanding of the differences.
• Understanding protocols common in ICS environments (e.g., Ethernet/IP, CIP, Modbus, OPC, MQTT, etc.) and industrial networking topologies (e.g., ring, star, etc.).
• Familiar with security technologies within the ICS environment such as firewalls, IDS, endpoint security solutions, access control systems, and other related security technologies.
• Strong understanding of network architecture and cybersecurity principles.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a multidisciplinary team.

Why is Acuity Brands a great place for Security Engineers?

• Our team is a strategic part of the direction of our company.
• Our company is a very profitable market leader and provides financial stability.
• You will work with highly talented, fun, and supportive teams.
• We believe in a healthy work/life balance.
• We produce quality technology solutions that you can be proud of.

We value diversity and are an equal opportunity employer. All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Accommodation for Applicants with Disabilities: As an equal opportunity employer, Acuity Inc. is committed to providing reasonable accommodations in its application process for qualified individuals with disabilities and disabled veterans. If you have difficulty using our online system due to a disability and need an accommodation, you may contact us at +1 (770) 922-9000, select option 4. Please clearly indicate what type of accommodation you are requesting and for what requisition.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property.

Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume. Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.