Cyber Security Lead Engineer

Job Description Summary

Cyber Security is an exciting growth area of the business and the individual will have the freedom to develop the business’s R&D approach, particularly in introducing improved tools and automated test processes.

Typical Project Types

• Substation SCADA Systems

Job Description

Responsibilities:

• Contribute to the execution of the Secure Development Lifecycle (SDL) for all the M&D products and projects. This includes security assessments, threat modeling, static code results analysis, security requirements, high level design and test strategy specifications, secure deployment guides.
• Participate in design and test specifications review for the M&D products, to cover the cyber security perspective (ensure secure design and implementation requirements are met).
• Coordinate with M&D software teams to ensure all relevant artifacts are ready for the NPI technical reviews.
• Perform cyber security reviews for all M&D NPI technical reviews that do not require design office representation.
• Create and maintain the cyber security compliance documents as needed (e.g. NERC CIP, IEEE 1686, IEC 62443). Perform M&D roadmap documentation on our products aligning with IEC 62443.
• Compliance with all relevant industry standards
• Own the cyber security roadmap execution (ensure progress in M&D through collaboration with M&D program line leaders and the GA cyber security team, as well as through assisting the software teams where needed).
• Implement the cyber security vulnerability and incident process for M&D products.

Required qualifications:

• Bachelor’s Degree in Engineering, Computer Science, or Information Technology from an accredited university
• Minimum 7 years of experience in cyber security design, implementation, and applications.
• Minimum 4 years of experience in software design and implementation.
• Demonstrated knowledge and understanding of network communications protocols in the TCP/IP network stack.
• Experience with secure software development (SDL)
• Secure design and implementation requirements, techniques, and practices
• Experience with cyber security aspects, such as

• Symmetric and asymmetric cryptography and PKI infrastructure
• LDAP, RADIUS, TLS, SSH, SFTP, RSA, HTTPS
• Encryption and Code Signing

• Knowledge of cyber security standards and regulations, such as IEC 62443, NERC CIP, IEEE1686
• Good writing and oral communication skills

Nice to have skills:

• Experience with penetration testing
• Experience with threat modeling techniques and tools
• Experience with secure testing, including tools for static code analysis, fuzzing

Additional Information

Relocation Assistance Provided: Yes