Cyber Research Scientist; Internal

The Cyber Research Scientist is responsible for conducting research in industrial cybersecurity relevant to the energy industry. This position is funded through an external grant from the Department of Energy (DOE) and is responsible for ensuring project research objectives are achieved. Responsibilities include developing cybersecurity and Cyber-Physical Systems (CPS) solutions, contributing to education, training, and outreach, managing research facilities, developing software products, and producing scholarly publications and presentations.

The individual will also mentor graduate and undergraduate students and prepare periodic research reports.

This is a grant-funded position with an initial appointment of 1.5 years. Continued employment is contingent upon funding availability and performance.

• Research industrial cybersecurity threats and vulnerabilities specific to the energy industry.
• Develop effective solutions for detecting and preventing network intrusions targeting industrial control systems (ICS).
• Design and implement cyber-physical systems (CPS) solutions to enhance the resilience of industrial systems against cyberattacks.
• Maintain proficiency in evolving cybersecurity trends and emerging threats through continuous learning and research.
• Collaborate with other researchers and industry experts to exchange knowledge and advance the field of industrial cybersecurity.
• Develop research proposals under the supervision of principal investigators for external funding opportunities.
• Disseminate research results in workshops, meetings, and national/international conferences.

• Prepare and deliver clear, concise, and informative presentations on research findings and advancements.
• Write comprehensive research reports, manuscripts, and funding proposals for securing research grants.
• Develop educational and training materials for various audiences on industrial cybersecurity and related topics.
• Create operations and procedure manuals to guide research activities and ensure consistency.
• Document research methodology, findings, and conclusions for future reference and dissemination.

• Establish the physical research facility, including setting up necessary equipment and infrastructure.
• Implement and configure a virtual simulation platform for testing and research purposes.
• Maintain and manage the research facility, ensuring its smooth operation and functionality.

• Design and develop training programs on industrial cybersecurity and CPS solutions for different audiences, including industry professionals, students, and researchers.
• Deliver training sessions for different audiences.
• Engage in outreach activities to raise awareness about industrial cybersecurity and promote best practices.

• Guide and mentor graduate and undergraduate students on relevant research projects related to industrial cybersecurity.
• Provide feedback and support to students to help them develop their research skills and expertise.
• Other duties may be assigned to this position on a regular or occasional basis to respond to the needs of the university.

• Master’s degree in a relevant field such as cybersecurity, computer science, engineering, or management information systems (MIS).
• Experience in network security, vulnerability assessment, penetration testing, and incident response.
• Proficiency in Python, C/C++, SQL, and MATLAB.
• At least two years of software development experience.

• At least two years of demonstrated expertise in industrial cybersecurity and related research methodologies.
• At least two years of experience working in multidisciplinary teams.
• At least one year of experience with Cyber-Physical Systems (CPS).
• Professional cybersecurity certifications (e.g., CompTIA Security+).
• Experience with grant-funded research and peer-reviewed publications.
• Experience developing and implementing PLC programs and working with industrial control system protocols, including Modbus.
• Record of scholarly accomplishments (e.g., publications, presentations, research awards).

• Proficiency in using/developing tools to detect, evaluate, and mitigate cybersecurity risks associated with the energy, petrochemical and port industries.
• Expertise in organizing, analyzing, and interpreting complicated research data to develop innovative approaches to tackle technological challenges.
• An ability to convey intricate cybersecurity findings in a clear way in verbal and written communication.
• Experience in preparing abstracts, presentations, research reports, manuscripts, funding proposals, education and training materials, operations and procedure manuals, and other written material and documentation.
• Proficiency in UNIX/Linux operating systems.
• Proficiency in network analysis and monitoring tools such as Wireshark, Squil, and…