Cyber Security Consultant

Are you a motivated, hands-on cybersecurity professional with experience in Industrial Control System (ICS) and Operational Technology (OT) environments? As an OT Cybersecurity Consultant for EIS Cyber, you will go on site to customer facilities mainly focused in the Twin Cities area and beyond to assess, advise, configure, and implement, executing the procedures, drawings, and designs our team provides.

EIS Cyber provides OT cybersecurity services to U.S. critical infrastructure and other regulated industries, including oil and gas, the defense industrial base, water and wastewater, and healthcare. Our customers include several Fortune 500 companies as well as smaller organizations.

Our work covers nearly every function of the NIST Cybersecurity Framework: risk management and assessments, vulnerability scanning and remediation, policy development, DR/BR planning and implementation, and network monitoring. Our core expertise is the NIST family of standards and ISA/IEC 62443, and we have growing expertise in NIS2 and CRA and also support CMMC.

We can deliver pure planning, full implementation, or a hybrid of the two, as a defined project or as an embedded engineer supporting a customer's team.

This is a hands-on role. You will take a procedure, a drawing, or a design from our team, go to the customer site, and execute it. You will not be expected to design or architect solutions at the outset. After a few calls with our team and time to review the vendor documentation, you should be comfortable executing the work independently. Typical assignments include:

• Configuring switches and firewalls to a provided secure network design
• Installing and configuring automated asset inventory and network monitoring tools, including offline installations, and setting up discovery on OT networks
• Configuring vulnerability management platforms, running scans per a defined procedure, and, once our team has interpreted the results, assisting with remediation
• Implementing and supporting backup and recovery solutions
• Supporting remediation, which may mean recommending a fix for the customer to implement or carrying out the fix yourself

• Educational
  • Required
    • A 4-year Engineering or Information Systems degree, or equivalent military training, vocational training, or professional experience
  • Preferred
    • Cybersecurity or Information Systems certification (Security+, CISSP, GICSP, etc.)
    • Certification with IT/OT cybersecurity standards:
      • ISO 27001/27002
      • ISA/IEC 62443
      • NERC CIP
• Professional
  • Required
    • Minimum 2 years of combined experience in OT and cybersecurity
    • Hands-on experience with OT cybersecurity tooling, such as automated asset inventory, vulnerability management platforms, and backup and recovery solutions, with specific examples you can discuss
    • Familiarity with networking concepts and best practices
    • Familiarity with NIST CSF, NIST 800 series, ISA/IEC 62443, or similar standards
    • Ability to follow technical procedures, drawings, and designs and execute them independently on site
  • Preferred
    • Experience in critical infrastructure sectors such as oil and gas, defense industrial base, water and wastewater, or healthcare
    • Experience remediating vulnerabilities in operating OT environments
    • Eligibility to obtain a U.S. government security clearance (an active clearance is not required)

The ideal candidate lives in the Twin Cities area, works independently with minimal supervision, learns new tools quickly, and completes tasks on schedule as dictated by customer needs.

• Travel: up to 75%, which may be day trips, overnight trips, or international travel
• Schedule: most work is done during normal business hours, but this is not a Monday-to-Friday, 8-to-5 role. Overtime, including weekends and holidays, may be required
• Citizenship: must be a U.S. citizen, as many customers are DoD contractors that require it for work involving CUI and classified information
• Screening: must pass a background check and may be subject to periodic and random drug screening
• Physical requirements: must meet the physical requirements specified by customers

Location: Twin Cities, Minnesota, working on site at customer facilities.